diff --git a/package.json b/package.json
index eb43736ed9..440460fe63 100644
--- a/package.json
+++ b/package.json
@@ -61,7 +61,6 @@
     "karma-jasmine": "^1.1.1",
     "karma-sourcemap-loader": "^0.3.7",
     "karma-webpack": "^2.0.9",
-    "md5": "^2.2.1",
     "merge-stream": "^1.0.1",
     "mustache": "^2.3.0",
     "mysql": "^2.15.0",
diff --git a/services/loopback/package.json b/services/loopback/package.json
index 40637ceb0c..9331b19d88 100644
--- a/services/loopback/package.json
+++ b/services/loopback/package.json
@@ -15,6 +15,7 @@
     "loopback-connector-mysql": "^3.0.0",
     "loopback-connector-remote": "^3.1.1",
     "loopback-context": "^3.3.0",
+    "md5": "^2.2.1",
     "serve-favicon": "^2.0.1",
     "strong-error-handler": "^2.1.0"
   },