`Directory /var/www/html/vendor/ezyang/htmlpurifier/library/HTMLPurifier/DefinitionCache/Serializer not writable.` Why does this library need the vendor folder on which it lives to be writeable? It seems unnecessary, and it opens the possibility of vulnerabilities.