stats.json vendor/ blacklist