Adopt license eye to check dependencies' license

[kezhenxu94]

• [ ] If this pull request closes/resolves/fixes an existing issue, replace the issue number. Closes #.
• [x] Update the CHANGES log.

This is still not perfect, for example there are some duplicate dependencies that the maven resolver needs more enhancements, but that doesn't matter too much IMO.

[wu-sheng]

[kezhenxu94]

this is expected, we run the dependency check only when there is any pom.xml file changed, which is not the case in this PR

[kezhenxu94]

I'll very soon open another PR with pom.xml file changed to verify this.