Okay, this seems to be tricky, and different projects do it in different ways.
Some projects seem to do it the way I prepared it (Spark or Cassandra) . See the root level files https://github.com/apache/spark/blob/master/NOTICE or https://github.com/apache/cassandra/blob/trunk/NOTICE.txt Which way is correct? Having a fat NOTICE file may be ugly, but it would put us on the safe side, no? Robert suggested to have two LICENSE and NOTICE files, one at the source root, one for the binary distribution. If we go that way, then anyone that adds Flink as a Maven dependency (which bundles the bits) needs to figure out that the relevant NOTICE file is only available in the binary distribution - that the source NOTICE file is not listing all required entries. Would that really be correct?
