diff --git a/package-lock.json b/package-lock.json
index 7c7a3eaa..c459d449 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,6 +1,6 @@
 {
   "name": "@opengovsg/mockpass",
-  "version": "1.0.1",
+  "version": "1.0.3",
   "lockfileVersion": 1,
   "requires": true,
   "dependencies": {
@@ -1836,17 +1836,12 @@
       }
     },
     "xml-crypto": {
-      "version": "github:datagovsg/xml-crypto#4ec5d5ef632f5cce85c41d2d4293c4694ef146e1",
+      "version": "1.0.0",
+      "resolved": "https://registry.npmjs.org/xml-crypto/-/xml-crypto-1.0.0.tgz",
+      "integrity": "sha512-2Z3HwciHKOZH2Sp8SyRAx3V5ZhFGJ1++HoTaTERiCxvStfmXp+Cxm6ixMuxdnu8pWAtbVC+fGILUBi6xQtjilQ==",
       "requires": {
-        "xmldom": "0.1.19",
+        "xmldom": "0.1.27",
         "xpath.js": "1.1.0"
-      },
-      "dependencies": {
-        "xmldom": {
-          "version": "0.1.19",
-          "resolved": "https://registry.npmjs.org/xmldom/-/xmldom-0.1.19.tgz",
-          "integrity": "sha1-Yx/Ad3bv2EEYvyUXGzftTQdaCrw="
-        }
       }
     },
     "xml-encryption": {
diff --git a/package.json b/package.json
index 2663ef58..90eefa4b 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@opengovsg/mockpass",
-  "version": "1.0.2",
+  "version": "1.0.3",
   "description": "A mock SingPass/CorpPass server for dev purposes",
   "main": "index.js",
   "bin": {
@@ -33,7 +33,7 @@
     "express": "^4.16.3",
     "morgan": "^1.9.0",
     "mustache": "^2.3.2",
-    "xml-crypto": "github:datagovsg/xml-crypto",
+    "xml-crypto": "^1.0.0",
     "xml-encryption": "^0.11.2",
     "xmldom": "^0.1.27",
     "xpath": "0.0.27"