clarify license

Author: 1lann

README.md

@@ -4,4 +4,6 @@ Scans a file or folder recursively for jar files that may be vulnerable to Log4S
 
 ## License
 
-[Unlicensed](/LICENSE)
+Code here is licensed under [Unlicensed](/LICENSE).
+
+With the exception of `velocity-1.1.9.jar` which is an example vulnerable `.jar` file part of [Velocity](https://github.com/PaperMC/Velocity) which is licensed under GPLv3.