diff --git a/projects/ncdns-nsis/build b/projects/ncdns-nsis/build
index 49a1b65..ba3a892 100644
--- a/projects/ncdns-nsis/build
+++ b/projects/ncdns-nsis/build
@@ -51,6 +51,9 @@ cp -a /var/tmp/dist/python-windows/bin "${ARTIFACTS}/python"
 tar -C /var/tmp/dist/ -xf $rootdir/[% c('input_files_by_name/stem') %]
 cp -a /var/tmp/dist/stem-*/stem "${NEUTRAL_ARTIFACTS}/stem"
 
+tar -C /var/tmp/dist/ -xf $rootdir/[% c('input_files_by_name/stemns') %]
+cp /var/tmp/dist/StemNS/stemns.py "${NEUTRAL_ARTIFACTS}/stemns/"
+
 # Windows PE metadata requires that the version be a dot-delimited 4-tuple of
 # numbers (no leading v)
 NCDNS_NSIS_VERSION=[% c('version') %]
diff --git a/projects/ncdns-nsis/config b/projects/ncdns-nsis/config
index a9631b6..359d45a 100644
--- a/projects/ncdns-nsis/config
+++ b/projects/ncdns-nsis/config
@@ -60,6 +60,8 @@ input_files:
     URL: 'https://files.pythonhosted.org/packages/source/s/stem/stem-[% c("var/stem_version") %].tar.gz'
     sha256sum: a0b48ea6224e95f22aa34c0bc3415f0eb4667ddeae3dfb5e32a6920c185568c2
     # TODO: This sha256sum was grabbed from PyPI and hasn't been verified.  We should probably switch to using an OpenPGP sig.
+  - project: stemns
+    name: stemns
   - filename: pe_checksum_fix.py
   - name: python-pefile
     URL: https://files.pythonhosted.org/packages/7e/9b/f99171190f04cd23768547dd34533b4016bd582842f53cd9fe9585a74c74/pefile-2017.11.5.tar.gz