What are the legal obligations that I should be aware of using winstone-0.9.9.jar in a distributed software package?