Add-notice-about-license

NOTICE

@@ -0,0 +1,27 @@
+# THIRD-PARTY LIBRARIES
+
+## MPL-2.0
+
+This project statically links the following [Mozilla Public License 2.0 (MPL-2.0)](https://www.mozilla.org/en-US/MPL/2.0/) libraries.
+The list contains the Go module path and the version of the library used.
+
+- github.com/hashicorp/errwrap-v1.1.0
+- github.com/hashicorp/go-cleanhttp-v0.5.2
+- github.com/hashicorp/go-multierror-v1.1.1
+- github.com/hashicorp/go-retryablehttp-v0.7.7
+- github.com/hashicorp/go-rootcerts-v1.0.2
+- github.com/hashicorp/go-secure-stdlib/strutil-configutil/v0.1.5
+- github.com/hashicorp/hcl-v1.0.1-vault-5
+- github.com/hashicorp/vault-client-go-v0.4.3
+- github.com/letsencrypt/boulder-v0.0.0-20241010192615-6692160cedfa
+
+Modifications to original MPL-2.0 files will be documented and made available.
+
+## LGPL-3.0
+
+This project statically links the following [GNU Lesser General Public License 3.0 (LGPL 3.0)](https://www.gnu.org/licenses/lgpl-3.0.txt) libraries.
+The list contains the Go module path and the version of the library used.
+
+- github.com/juju/fslock-v0.0.0-20160525022230-4d5c94c67b4b
+
+Modifications to original LGPL-3.0 files will be documented and made available.

README.md

@@ -49,14 +49,25 @@ The OCI and OCM support can be found in packages
 
 Install the latest release with
 
-- [Bash](#bash)
-- [Homebrew](#homebrew)
-- [NixOS](#nixos)
-- [AUR](#aur)
-- [Container](#container)
-- [Chocolatey](#chocolatey)
-- [Winget](#winget)
-- [GitHub Releases](https://github.com/open-component-model/ocm/releases/latest)
+- [Open Component Model](#open-component-model)
+  - [OCM Specifications](#ocm-specifications)
+  - [OCM Library](#ocm-library)
+  - [OCM CLI](#ocm-cli)
+  - [Installation](#installation)
+    - [Bash](#bash)
+    - [Homebrew](#homebrew)
+    - [NixOS](#nixos)
+    - [AUR](#aur)
+    - [Container](#container)
+      - [Build and run it yourself](#build-and-run-it-yourself)
+    - [Chocolatey](#chocolatey)
+    - [Winget](#winget)
+  - [Examples](#examples)
+  - [GPG Public Key](#gpg-public-key)
+  - [Contributing](#contributing)
+  - [Release Process](#release-process)
+  - [Licensing](#licensing)
+    - [Third Party Licenses](#third-party-licenses)
 
 ### Bash
 
@@ -191,3 +202,7 @@ Please refer to the [Release Process Documentation](RELEASE_PROCESS.md) for more
 Copyright 2024 SAP SE or an SAP affiliate company and Open Component Model contributors.
 Please see our [LICENSE](LICENSE) for copyright and license information.
 Detailed information including third-party components and their licensing/copyright information is available [via the REUSE tool](https://api.reuse.software/info/github.com/open-component-model/ocm).
+
+### Third Party Licenses
+
+The list of statically linked third-party libraries and their licenses can be found in the [NOTICE](./NOTICE) file.