fix: Correct-link

CONTRIBUTING.md

@@ -2,4 +2,4 @@
 
 We welcome many different types of contributions.
 
-Please refer to the [Contributing Guide in the Community repository](https://github.com/open-component-model/community/blob/main/CONTRIBUTING.md) for more information on how to get support from maintainers, find work to contribute, the Pull Request checklist, the Pull Request process, and other useful information on how to contribute to OCM.
+Please refer to the [Contributing Guide](https://github.com/open-component-model/.github/blob/main/CONTRIBUTING.md) for more information on how to get support from maintainers, find work to contribute, the Pull Request checklist, the Pull Request process, and other useful information on how to contribute to OCM.

NOTICE

@@ -0,0 +1,27 @@
+# THIRD-PARTY LIBRARIES
+
+## MPL-2.0
+
+This project statically links the following [Mozilla Public License 2.0 (MPL-2.0)](https://www.mozilla.org/en-US/MPL/2.0/) libraries.
+The list contains the Go module path and the version of the library used.
+
+- github.com/hashicorp/errwrap-v1.1.0
+- github.com/hashicorp/go-cleanhttp-v0.5.2
+- github.com/hashicorp/go-multierror-v1.1.1
+- github.com/hashicorp/go-retryablehttp-v0.7.7
+- github.com/hashicorp/go-rootcerts-v1.0.2
+- github.com/hashicorp/go-secure-stdlib/strutil-configutil/v0.1.5
+- github.com/hashicorp/hcl-v1.0.1-vault-5
+- github.com/hashicorp/vault-client-go-v0.4.3
+- github.com/letsencrypt/boulder-v0.0.0-20241010192615-6692160cedfa
+
+Modifications to original MPL-2.0 files will be documented and made available.
+
+## LGPL-3.0
+
+This project statically links the following [GNU Lesser General Public License 3.0 (LGPL 3.0)](https://www.gnu.org/licenses/lgpl-3.0.txt) libraries.
+The list contains the Go module path and the version of the library used.
+
+- github.com/juju/fslock-v0.0.0-20160525022230-4d5c94c67b4b
+
+Modifications to original LGPL-3.0 files will be documented and made available.

README.md

@@ -49,14 +49,25 @@ The OCI and OCM support can be found in packages
 
 Install the latest release with
 
-- [Bash](#bash)
-- [Homebrew](#homebrew)
-- [NixOS](#nixos)
-- [AUR](#aur)
-- [Container](#container)
-- [Chocolatey](#chocolatey)
-- [Winget](#winget)
-- [GitHub Releases](https://github.com/open-component-model/ocm/releases/latest)
+- [Open Component Model](#open-component-model)
+  - [OCM Specifications](#ocm-specifications)
+  - [OCM Library](#ocm-library)
+  - [OCM CLI](#ocm-cli)
+  - [Installation](#installation)
+    - [Bash](#bash)
+    - [Homebrew](#homebrew)
+    - [NixOS](#nixos)
+    - [AUR](#aur)
+    - [Container](#container)
+      - [Build and run it yourself](#build-and-run-it-yourself)
+    - [Chocolatey](#chocolatey)
+    - [Winget](#winget)
+  - [Examples](#examples)
+  - [GPG Public Key](#gpg-public-key)
+  - [Contributing](#contributing)
+  - [Release Process](#release-process)
+  - [Licensing](#licensing)
+    - [Third Party Licenses](#third-party-licenses)
 
 ### Bash
 
@@ -191,3 +202,7 @@ Please refer to the [Release Process Documentation](RELEASE_PROCESS.md) for more
 Copyright 2024 SAP SE or an SAP affiliate company and Open Component Model contributors.
 Please see our [LICENSE](LICENSE) for copyright and license information.
 Detailed information including third-party components and their licensing/copyright information is available [via the REUSE tool](https://api.reuse.software/info/github.com/open-component-model/ocm).
+
+### Third Party Licenses
+
+The list of statically linked third-party libraries and their licenses can be found in the [NOTICE](./NOTICE) file.