diff --git a/metadata/org.mrpdaemon.android.encdroid.txt b/metadata/org.mrpdaemon.android.encdroid.txt
index c32fcfa9ba..6965a95ecd 100644
--- a/metadata/org.mrpdaemon.android.encdroid.txt
+++ b/metadata/org.mrpdaemon.android.encdroid.txt
@@ -23,6 +23,12 @@ Build:1.0,1
     prebuild=mvn package -f $$EncfsJava$$/pom.xml && \
         cp $$EncfsJava$$/target/encfs-java-0.1.jar libs/
 
+Maintainer Notes:
+In the event that this is ever enabled, also check that the openssl source
+(it has its own copy embedded in the source repo) is not vulnerable to
+CVE-2014-0160.
+.
+
 Auto Update Mode:None
 Update Check Mode:Tags
 Current Version:2.0.3