point to NOTICE for third-party lib licenses