Our last release of 3.0.2-incubating got a good blessing on our LICENSE/NOTICE - the first release to do so without any suggestions from anyone to improve anything. As such, I've documented what I believe the formula is for dealing with that and keeping it clean:
http://tinkerpop.incubator.apache.org/docs/3.1.0-SNAPSHOT/developer.html#dependencies I suggest that all committers read up on that. I included links to the Apache docs that discuss such things officially - mine just try to put those docs in TinkerPop perspective.
