It is safe to rezz the vendor package.
But you can't rezz the box inside the vendor package (to see which one of the collection it is or if you got a size or any of that - basically to give it its assigned traits). It has to stay in inventory until you're ready.
