improved manifest.json verification