We have just completed the first phase of making Knative vendorless!
If your project doesn't use the Knative or K8s code generators, it's likely it can benefit from this. If not, you will have to wait a bit longer...
Here's an epic tracking the effort:
knative/infra#134 [1]. The epic describes the reasons why we are doing the move, and a plan on how we want to get there. The plan has been accepted by TOC (if you are interested, see
the slides [2]). It should be added that this applies to upstream projects - downstream products are likely to keep the vendor (applying CVE patches, offline security etc.)