Notices & attribution

Full notices, including the upstream MIT license text, live in NOTICE.md.