thou shalt touch a LICENSE file in every new third-party package