vendor stack audit