Looks like MRs !20 and !21 brought in some dependency changes without updating the NOTICE. This includes the new dependencies.

The SnakeYAML and Elasticsearch removals are coming from GPL / MIT sections. I believe FOSSA database had these older versions
miscategorized (common among multi-licensed libraries, since it is hard for FOSSA to know which license you would choose). Newer
versions seem to have different choices.