You actually see the diff on dependencies on updates. Vendoring is done in the Go world. Together with `yarn autoclean` it can be reasonable.
Reference: https://yarnpkg.com/lang/en/docs/cli/autoclean/