update README.md with note about dependency licensing