The OpenSSL Heartbleed bug shines light on an area of open source that has not received enough attention. Security reviews and documentation can be challenging and tedious, but both are crucial to ensuring the viability of an open source application. Open source communities need to find new ways to get people more involved in these aspects to avoid the next bug of this magnitude.