fixes "@source"-call to actually exclude the vendor-dir (#2497)

fixes "@source"-call to actually exclude the vendor-dir (#2497) #2088