make list of dependency licenses

GPL may be an issue