diff --git a/packages/qmd/default.nix b/packages/qmd/default.nix
index b8d80d8..accf144 100644
--- a/packages/qmd/default.nix
+++ b/packages/qmd/default.nix
@@ -2,7 +2,7 @@
   lib,
   stdenv,
   buildNpmPackage,
-  fetchFromGitHub,
+  fetchzip,
   nodejs_22,
   python3,
   sqlite,
@@ -16,11 +16,9 @@ buildNpmPackage rec {
   pname = "qmd";
   inherit version;
 
-  src = fetchFromGitHub {
-    owner = "tobi";
-    repo = "qmd";
-    rev = "v${version}";
-    hash = "sha256-bqIVaNRTa8H5vrw3RwsD7QdtTa0xNvRuEVzlzE1hIBQ=";
+  src = fetchzip {
+    url = "https://git.johnogle.info/johno/qmd/archive/ec36abc23ab18147c627289330b25b29a6a18369.tar.gz";
+    sha256 = "sha256-0rwo8Etu/VAca5Gkt79C4JsZ2F2L6P4txPjwlnRFPCo=";
   };
 
   # Vendored package-lock.json generated from QMD's package.json.
@@ -31,7 +29,7 @@ buildNpmPackage rec {
   '';
 
   # Will be updated on first build attempt — nix will report the correct hash
-  npmDepsHash = "sha256-iBFj0C0BYLPtjOQqp5O/lRjeKTMMNoqHLtjGeERECpk=";
+  npmDepsHash = "sha256-3sis2NIuPDnwAOzWEQBcA+VUsMaxO8Nkuk6wCJ9foBA=";
 
   nodejs = nodejs_22;
 
diff --git a/packages/qmd/package-lock.json b/packages/qmd/package-lock.json
index 20b6e6d..c4a656f 100644
--- a/packages/qmd/package-lock.json
+++ b/packages/qmd/package-lock.json
@@ -3046,9 +3046,9 @@
       "license": "BSD-2-Clause"
     },
     "node_modules/jsonfile": {
-      "version": "6.2.0",
-      "resolved": "https://registry.npmjs.org/jsonfile/-/jsonfile-6.2.0.tgz",
-      "integrity": "sha512-FGuPw30AdOIUTRMC2OMRtQV+jkVj2cfPqSeWXv1NEAJ1qZ5zb1X6z1mFhbfOB/iy3ssJCD+3KuZ8r8C3uVFlAg==",
+      "version": "6.2.1",
+      "resolved": "https://registry.npmjs.org/jsonfile/-/jsonfile-6.2.1.tgz",
+      "integrity": "sha512-zwOTdL3rFQ/lRdBnntKVOX6k5cKJwEc1HdilT71BWEu7J41gXIB2MRp+vxduPSwZJPWBxEzv4yH1wYLJGUHX4Q==",
       "license": "MIT",
       "dependencies": {
         "universalify": "^2.0.0"