#1 Created the dependency license matrix

LICENSES.md

@@ -0,0 +1,36 @@
+# Licenses
+Dependency | License
+--- | ---
+javax.servlet-api | CDDL GPL 2.0
+javax.servlet.jsp:javax.servlet.jsp-api | CDDL GPL 2.0
+javax.servlet:jstl:1.2 | CDDL GPL 2.0
+commons-httpclient:commons-httpclient:3.1 | Apache 2.0
+commons-beanutils:commons-beanutils*** | Apache 2.0
+commons-codec:commons-codec:1.7*** | Apache 2.0
+commons-discovery:0.5*** | Apache 2.0 
+log4j | Apache 2.0
+org.apache.cxf:cxf-bundle | Apache 2.0 
+com.fasterxml.jackson.core:jackson-databind:2.3.4 | Apache 2.0, LGPL 2.1 (Just Apache 2.0 in later versions)
+com.fasterxml.jackson.core:jackson-core:2.3.4*** | Apache 2.0, LGPL 2.1 (Just Apache 2.0 in later versions)
+org.codehaus.woodstox:woodstox-core-asl:4.2.0*** | Apache 2.0
+org.codehaus.woodstox:stax2-api:3.1.3*** |  BSD 2-clause
+stax:stax-api:1.0.1 | Apache 2.0
+org.apache.struts:struts-core:1.3.10 | Apache 2.0
+org.apache.struts:struts-taglib:1.3.10 | Apache 2.0
+org.apache.tomcat.embed:tomcat-embed-core:8.0.42 | Apache 2.0
+org.apache.tomcat.embed:tomcat-embed-logging-juli:8.0.42 | Apache 2.0
+org.apache.tomcat.embed:tomcat-embed-jasper:8.0.42 | Apache 2.0
+com.bmuschko.tomcat:gradle-tomcat-plugin:2.5 | Apache 2.0
+com.google.guava:guava:23.0 | Apache 2.0
+junit:junit:4.12 | EPL 1.0 (EPL 2.0 in later versions)
+org.apache.axis2:axis2:1.6.2*** | Apache 2.0
+org.slf4j:slf4j-api:1.6.1*** | MIT
+org.apache.neethi:neethi (closed-source version unknown) *** | Apache (Apache 2.0 in later versions)
+org.apache.ws.xmlschema:xmlschema-core (closed-source version unknown) *** | Apache 2.0
+proguard? (closed-source version unknown) *** | GPL 2.0
+xalan:xalan (closed-source version unknown) *** | Apache (Apache 2.0 in later versions)
+bb-taglib | ?
+bb-platform | ?
+bb-cms-admin | ?
+
+Note:  *** means the dependency was in the closed-source version, but hasn't been used in the open-source version yet.