We only need a single file and it avoids pulling in e.g. `nokogiri` which is vulnerable. Allow updating it using `brew vendor-gems`.