The apache-rat module which creates the distributions contains Notice and License files for all the Commons dependencies.
I think these are now unnecessary, as they are the same as for RAT itself. Commons Compress 1.5 no longer has any 3rd party notices in the NOTICE file
