diff --git a/README.md b/README.md
index fdd64f8..c576464 100644
--- a/README.md
+++ b/README.md
@@ -78,7 +78,7 @@ All files used by SSN are password-protected .zip files with a .exe header. The
 
 For each file, the extra field contains the following information:
 
-- For password protected files, the password needed to decrypt the file. The password itself is encoded and even if you have decoded it, it is usually in binary. Therefore, you will most likely need a custom .zip reader since most .zip software only works with textual passwords.
+- For password protected files, the password needed to decrypt the file. The password itself is encoded and even if you have decoded it, it is usually in binary. Most .zip software only accepts textual passwords, so I recommend writing a custom .zip reader.
 - Whether this file is stored in full, or whether only the differences are stored in vcdiff/xdelta3 encoding. Also flags whether a file was deleted, and it includes the hashes of both the old and the new file.
 
 ## Manifests (`.patchmanifest`)
@@ -87,11 +87,11 @@ TODO: A .patchmanifest SSN file contains a single file `manifest.xml` which incl
 
 ## Patches (`.solidpkg`)
 
-TODO: A .solidpkg file contains a single file `metafile.solid`
+TODO: A .solidpkg file contains a single file `metafile.solid`, which is in Bencode format (similar to .torrent files) and includes the names, sizes and hashes of all files with the patch data (.zip, .z01, .z02 etc.).
 
 ## Version files (`.version`)
 
-TODO
+TODO: Once a patch is installed, you can look into the .version file to figure out which release it is, and use the hashes to verify that the installation is correct.
 
 # File download and CDN
 
diff --git a/package-lock.json b/package-lock.json
index 7259d6e..4963e33 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -4,9 +4,9 @@
   "lockfileVersion": 1,
   "dependencies": {
     "@types/node": {
-      "version": "10.3.4",
-      "resolved": "https://registry.npmjs.org/@types/node/-/node-10.3.4.tgz",
-      "integrity": "sha512-YMLlzdeNnAyLrQew39IFRkMacAR5BqKGIEei9ZjdHsIZtv+ZWKYTu1i7QJhetxQ9ReXx8w5f+cixdHZG3zgMQA==",
+      "version": "10.5.1",
+      "resolved": "https://registry.npmjs.org/@types/node/-/node-10.5.1.tgz",
+      "integrity": "sha512-AFLl1IALIuyt6oK4AYZsgWVJ/5rnyzQWud7IebaZWWV3YmgtPZkQmYio9R5Ze/2pdd7XfqF5bP+hWS11mAKoOQ==",
       "dev": true
     },
     "sax": {
@@ -15,9 +15,9 @@
       "integrity": "sha512-NqVDv9TpANUjFm0N8uM5GxL36UgKi9/atZw+x7YFnQ8ckwFGKrl4xX4yWtrey3UJm5nP1kUbnYgLopqWNSRhWw=="
     },
     "xml-js": {
-      "version": "1.6.4",
-      "resolved": "https://registry.npmjs.org/xml-js/-/xml-js-1.6.4.tgz",
-      "integrity": "sha512-ZJ4DPgx97LzSdZ0NAbd0J5gWeSgWTpL2hIH1j1bOmk6QMyppee0S+vQAv/H+oYY1923kck5msPWOuSs0BDUh/w==",
+      "version": "1.6.7",
+      "resolved": "https://registry.npmjs.org/xml-js/-/xml-js-1.6.7.tgz",
+      "integrity": "sha512-1hn0xwwfMcWywnJxqiOXiv+pZaOJyf/YWcUeqJICF0BFb+IOkRFSkKyeA0V62WqTHXNdBxNuCFHhS/w2DtYpoA==",
       "requires": {
         "sax": "^1.2.4"
       }
diff --git a/package.json b/package.json
index bb89899..607a8b4 100644
--- a/package.json
+++ b/package.json
@@ -6,9 +6,9 @@
     "test": "echo \"Error: no test specified\" && exit 1"
   },
   "devDependencies": {
-    "@types/node": "^10.3.4"
+    "@types/node": "^10.5.1"
   },
   "dependencies": {
-    "xml-js": "^1.6.4"
+    "xml-js": "^1.6.7"
   }
 }