Some more manifest.plist fields for later.
As suggested, include manifest.plist for core, and validate it.
Basic dependency conflict/requires management for OXPs