diff --git a/package/README-scanner.md b/README-scanner.md
similarity index 100%
rename from package/README-scanner.md
rename to README-scanner.md
diff --git a/README.md b/README.md
index 367eff8..599a38a 100644
--- a/README.md
+++ b/README.md
@@ -96,14 +96,14 @@ Then clone and run setup:
 ```bash
 git clone http://100.120.125.113:3000/pdm/security-tools.git
 cd security-tools
-bash package/setup.sh
+bash setup.sh
 ```
 
 **Without Tailscale:**
 ```bash
 git clone https://gitea.pdmarf.co.uk/pdm/security-tools.git
 cd security-tools
-bash package/setup.sh
+bash setup.sh
 ```
 
 To clone to a specific path:
@@ -114,7 +114,7 @@ git clone http://100.120.125.113:3000/pdm/security-tools.git /path/to/destinatio
 
 ## Activating on a New VM
 
-After cloning, run `package/setup.sh` once. It will:
+After cloning, run `setup.sh` once. It will:
 - Ask for your Telegram bot token and chat ID
 - Register cron jobs to run scans daily at 08:00
 - Send a test Telegram message confirming the VM is active
@@ -127,7 +127,7 @@ When changes are pushed to this repo, update any VM by running:
 ```bash
 cd ~/security-tools
 git pull
-bash package/setup.sh
+bash setup.sh
 ```
 
 `setup.sh` is safe to re-run — it skips steps already completed.
diff --git a/package/check-nextjs-rce.sh b/check-nextjs-rce.sh
similarity index 100%
rename from package/check-nextjs-rce.sh
rename to check-nextjs-rce.sh
diff --git a/package/check-npm-sudo-config.sh b/check-npm-sudo-config.sh
similarity index 100%
rename from package/check-npm-sudo-config.sh
rename to check-npm-sudo-config.sh
diff --git a/package/npm-security-check.sh b/npm-security-check.sh
similarity index 100%
rename from package/npm-security-check.sh
rename to npm-security-check.sh
diff --git a/package/setup.sh b/setup.sh
similarity index 100%
rename from package/setup.sh
rename to setup.sh