Do not ship vendor directory, to fix CVE-2020-8130
Do not ship vendor directory, to fix CVE-2020-8130

Reference:
https://hackerone.com/reports/651518
https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator?name=CVE-2020-8130&vector=AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H&version=3.1&source=NIST

While this gem doesn't directly expose that vulnerability, it does ship a vulnerable copy of Rake 12.x in the vendor directory; and that will get picked up by some CVE scanners.

This PR cuts the vendor directory from the shipped gem.

Signed-off-by: James Stocks <6c599b18e299029a3158cff46aa955c836b428be@chef.io>

gjtorikian/ecma-re-validator,gjtorikian/ecma-re-validator