diff --git a/package-lock.json b/package-lock.json
index cc4393804..37787d054 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -12,6 +12,7 @@
         "@aws-sdk/client-s3": "^3.825.0",
         "@aws-sdk/lib-storage": "^3.825.0",
         "@cloudron/connect-lastmile": "^2.2.1",
+        "@cloudron/manifest-format": "^5.27.0",
         "@cloudron/superagent": "^1.0.0",
         "@google-cloud/dns": "^5.2.0",
         "@google-cloud/storage": "^7.16.0",
@@ -19,7 +20,6 @@
         "@smithy/util-retry": "^4.0.5",
         "@types/node": "^22.15.30",
         "async": "^3.2.6",
-        "cloudron-manifestformat": "^5.27.0",
         "connect": "^3.7.0",
         "connect-timeout": "^1.9.0",
         "cookie-parser": "^1.4.7",
@@ -1089,6 +1089,19 @@
       "integrity": "sha512-hi5AcFHQNu0HrJM32vCq3kyEv4qJfAUgU6XSCCOYQ/E+CLQzz9VTH6gqx0kmQpsVtwV5ji6nVGONHTj7MHu1Og==",
       "license": "MIT"
     },
+    "node_modules/@cloudron/manifest-format": {
+      "version": "5.27.0",
+      "resolved": "https://registry.npmjs.org/@cloudron/manifest-format/-/manifest-format-5.27.0.tgz",
+      "integrity": "sha512-ZVEOffcIvm+XKmL+It7Dt5FUW4jjXQk2hC8Z+GrIiYognt7eqgK5nHS3PPcBdPRrBTqHKJ0Pwagv/xADr//9Fg==",
+      "license": "MIT",
+      "dependencies": {
+        "cron": "^4.3.1",
+        "safetydance": "2.5.1",
+        "semver": "^7.7.2",
+        "tv4": "^1.3.0",
+        "validator": "^13.15.15"
+      }
+    },
     "node_modules/@cloudron/superagent": {
       "version": "1.0.0",
       "resolved": "https://registry.npmjs.org/@cloudron/superagent/-/superagent-1.0.0.tgz",
@@ -3376,28 +3389,6 @@
         "node": ">=0.8"
       }
     },
-    "node_modules/cloudron-manifestformat": {
-      "version": "5.27.0",
-      "resolved": "https://registry.npmjs.org/cloudron-manifestformat/-/cloudron-manifestformat-5.27.0.tgz",
-      "integrity": "sha512-wtNVemuziOCHlcMNILkRyHKMFLertkf91pzp+Qxm3KQ4MMDHyeKHFde1jO+tLbBMtWhdUGopMFTRMapDtSf+WA==",
-      "license": "MIT",
-      "dependencies": {
-        "cron": "^4.1.0",
-        "safetydance": "2.5.0",
-        "semver": "^7.7.1",
-        "tv4": "^1.3.0",
-        "validator": "^13.12.0"
-      }
-    },
-    "node_modules/cloudron-manifestformat/node_modules/safetydance": {
-      "version": "2.5.0",
-      "resolved": "https://registry.npmjs.org/safetydance/-/safetydance-2.5.0.tgz",
-      "integrity": "sha512-hXwJw13AvbhClD2XAreKcFSkGhiTlhARYdY+EOL6WAgJ6DfZkD4+GIMT3JmdJPZSm7hLD2zP3TGjRSiaBJwDtg==",
-      "engines": [
-        "node >= 4.0.0"
-      ],
-      "license": "MIT"
-    },
     "node_modules/color-convert": {
       "version": "2.0.1",
       "license": "MIT",
@@ -8254,9 +8245,10 @@
       }
     },
     "node_modules/validator": {
-      "version": "13.12.0",
-      "resolved": "https://registry.npmjs.org/validator/-/validator-13.12.0.tgz",
-      "integrity": "sha512-c1Q0mCiPlgdTVVVIJIrBuxNicYE+t/7oKeI9MWLj3fh/uq2Pxh/3eeWbVZ4OcGW1TUf53At0njHw5SMdA3tmMg==",
+      "version": "13.15.15",
+      "resolved": "https://registry.npmjs.org/validator/-/validator-13.15.15.tgz",
+      "integrity": "sha512-BgWVbCI72aIQy937xbawcs+hrVaN/CZ2UwutgaJ36hGqRrLNM+f5LUT/YPRbo8IV/ASeFzXszezV+y2+rq3l8A==",
+      "license": "MIT",
       "engines": {
         "node": ">= 0.10"
       }
diff --git a/package.json b/package.json
index 4b69b92d9..047627189 100644
--- a/package.json
+++ b/package.json
@@ -16,6 +16,7 @@
     "@aws-sdk/client-s3": "^3.825.0",
     "@aws-sdk/lib-storage": "^3.825.0",
     "@cloudron/connect-lastmile": "^2.2.1",
+    "@cloudron/manifest-format": "^5.27.0",
     "@cloudron/superagent": "^1.0.0",
     "@google-cloud/dns": "^5.2.0",
     "@google-cloud/storage": "^7.16.0",
@@ -23,7 +24,6 @@
     "@smithy/util-retry": "^4.0.5",
     "@types/node": "^22.15.30",
     "async": "^3.2.6",
-    "cloudron-manifestformat": "^5.27.0",
     "connect": "^3.7.0",
     "connect-timeout": "^1.9.0",
     "cookie-parser": "^1.4.7",
diff --git a/src/apps.js b/src/apps.js
index fbdf76f78..40cbb4413 100644
--- a/src/apps.js
+++ b/src/apps.js
@@ -165,7 +165,7 @@ const appTaskManager = require('./apptaskmanager.js'),
     Location = require('./location.js'),
     logs = require('./logs.js'),
     mail = require('./mail.js'),
-    manifestFormat = require('cloudron-manifestformat'),
+    manifestFormat = require('@cloudron/manifest-format'),
     notifications = require('./notifications.js'),
     once = require('./once.js'),
     path = require('path'),
diff --git a/src/appstore.js b/src/appstore.js
index af4999b9e..1cfda54df 100644
--- a/src/appstore.js
+++ b/src/appstore.js
@@ -31,7 +31,7 @@ const assert = require('assert'),
     BoxError = require('./boxerror.js'),
     constants = require('./constants.js'),
     debug = require('debug')('box:appstore'),
-    manifestFormat = require('cloudron-manifestformat'),
+    manifestFormat = require('@cloudron/manifest-format'),
     paths = require('./paths.js'),
     promiseRetry = require('./promise-retry.js'),
     safe = require('safetydance'),
diff --git a/src/apptask.js b/src/apptask.js
index 6c2014055..882d797c2 100644
--- a/src/apptask.js
+++ b/src/apptask.js
@@ -26,7 +26,7 @@ const apps = require('./apps.js'),
     ejs = require('ejs'),
     fs = require('fs'),
     iputils = require('./iputils.js'),
-    manifestFormat = require('cloudron-manifestformat'),
+    manifestFormat = require('@cloudron/manifest-format'),
     mounts = require('./mounts.js'),
     os = require('os'),
     path = require('path'),