A number of Bouncycastle artifacts now come from WF Core, and thus the dependency and license info for them comes from core, but ee-feature-pack/common is still declaring them.