diff --git a/LICENSE.txt b/LICENSE.txt
index 8facf5235d..67bba7d36c 100644
--- a/LICENSE.txt
+++ b/LICENSE.txt
@@ -288,6 +288,7 @@ shell-quote: https://github.com/substack/node-shell-quote
 deep-equal: https://github.com/substack/node-deep-equal
 editor: https://github.com/substack/node-editor
 minimist: https://github.com/substack/node-minimist
+quotemeta: https://github.com/substack/quotemeta
 ----------
 
 Copyright 2010, 2011, 2012, 2013 James Halliday (mail@substack.net)
diff --git a/packages/mongo-livedata/mongo_driver.js b/packages/mongo-livedata/mongo_driver.js
index aaa9bc0b6c..548856a41e 100644
--- a/packages/mongo-livedata/mongo_driver.js
+++ b/packages/mongo-livedata/mongo_driver.js
@@ -228,6 +228,7 @@ var pendingSequences = [];
 
 // Like Perl's quotemeta: quotes all regexp metacharacters. See
 //   https://github.com/substack/quotemeta/blob/master/index.js
+// XXX this is duplicated with accounts_server.js
 var quotemeta = function (str) {
     return String(str).replace(/(\W)/g, '\\$1');
 };