Github user omalley commented on the issue:
https://github.com/apache/orc/pull/193
Legally, the binary artifacts from the Apache projects are supposed to
include them. For tarballs it is traditionally at the root of the project.
Especially for RPM and DEB packaging, you wouldn't want them at the root.
How about we move it to doc/orc/{NOTICE,LICENSE}?---
