added the license and notice file to the new box component
remove the direct dependency to log4j as it's a transitive dependency of slf4j-log4j