Github user joewitt commented on the issue:
https://github.com/apache/nifi/pull/2856
We need to ensure both nars produced have their LICENSE/NOTICE files
representing all source/binary artifacts that will be included. The best way
is to look at the content of the nar itself. I used the maven
dependency/compile scope in some cases as well but due to how we use Nars those
weren't always reliable.---
