Ah, I think this is because Cargo's vendor directory feature substitutes a directory specifically for the crates.io registry. Since only a Git dependency is specified, it doesn't even bother looking in the directory. Just patch the line in the crates.io file to say something like:
pkg = "*"
-- (
