Including the vendor folder is pointless because there are no dependencies. Running composer however creates the vendor directory and a few files. These should not be shipped with the final package.