Add OSS usage disclaimer (#961)

Author: lalitb

docs/List-of-OSS-Components.md

@@ -6,13 +6,15 @@ These are the Open Source components used by Microsoft 1DS / C++ Client Telemetr
 
 ZLIB DATA COMPRESSION LIBRARY.
 
-SDK maintains its own snapshot of the mainline ZLib with some Intel architecture performance optimizations [here](../zlib).
+SDK maintains its own snapshot of the mainline ZLib with some Intel architecture performance optimizations [here](../zlib). 
+It is the responsibility of product teams to ensure that a snapshot of zlib they use meets their product security and licensing requirements.
 
 ## [SQLite](https://www.sqlite.org/index.html)
 
 SQLite is a C-language library that implements a small, fast, self-contained, high-reliability, full-featured, SQL database engine.
 
 SDK maintains its own snapshot of the mainline SQLite, which is used for Windows builds [here](../sqlite). Other platforms use platform-provided SQLite.
+It is the responsibility of product teams to ensure that a snapshot of zlib they use meets their product security and licensing requirements.
 
 ## [nlohmann/json](https://github.com/nlohmann/json)
 
@@ -38,13 +40,15 @@ Google's C++ benchmarking framework. Used only for tests and not included in pro
 
 Reachability is a drop-in replacement for Apple's Reachability class. It is ARC-compatible, and it uses the new GCD methods to notify of network interface changes.
 SDK maintains its own snapshot of the mainline `tonymillion/Reachability` [here](../third_party/Reachability). This code is not used nor included in the build of non-Apple OS.
+Please note if customer product is adding dependency to this component, they should ensure it meets their product security and licensing requirements. 
 
 ## SHA-1 by Steve Reid
 
 Classic implementation of SHA-1 (Public Domain).
 SDK maintains its own snapshot of it [here](../third_party/sha1/sha1.c).
 Note that this component is not included or compiled into any of the shipable bits of SDK. It is included for internal developer debug builds only.
 For example, SHA-1 may be used to calculate destination ETW Provider GUID based on ETW Provider name on Windows OS in developer trace tooling / instrumentation.
+Please note if customer product is adding dependency to this component, they should ensure it meets their product security and licensing requirements.
 
 ## Other components and systems