Initially the following files were identified as possibly nested JAR or ZIP files:
./src/Hudson-core/hudson-core/src/test/resources/hudson/remoteCopyFiles.zip
./src/Hudson-core/hudson-test-framework/src/main/resources/maven-2.0.7-bin.zip
./src/Hudson-core/hudson-test-framework/src/main/resources/apache-maven-2.2.1-bin.zip
./src/Hudson-core/hudson-test-framework/src/main/resources/apache-maven-3.0.1-bin.zip
./src/Hudson-core/hudson-test-framework/src/main/resources/apache-ant-1.8.1-bin.zip
Guidance from Winston was to delete the ANT and Maven files as they can actually be obtained at runtime and do not need to be checked in

The remoteCopyFiles has been expanded in place.

There are still some issues with MIT licences and some CSS - passed to Winston

11-Aug: Split out Hudson-war into separate code package

2-Sept: additional clean up of comments etc.

Initially Zip files in contribution:

Several zip files in src\test\resources\org\eclipse\hudson\scm\subversion\*

Deleted these - don't need them. Updated bugzilla and submitted amended version to ipzilla

Zip files in contribution:

Many ZIP files under Hudson-test-harness\src\test\resources\hudson\*

Can these be deleted or expanded in the context of the code contribution

Decision - files removed and clean versions uploaded.

Aug-11: Logged issue to investigate the "secret.key" file included in the contribution

08-Aug: Code submitted in Bugzilla and CQ

08-Aug: Response from Wayne

svnkit-1.3.2 is buried inside the BlameSubversion-1.121.hpi file (which is
itself an embedded library--we'll need the sources for that). These third-party
libraries will have to be contributed separately.

I also noticed that the corresponding POM file is MIT-licensed. Is that
intended?

11-Aug: Hudson Bugzilla issues raised to address these

12-Aug: issues addressed and new version of archive uploaded to Bugzilla and CQ.

08-Aug: Code submitted in Bugzilla and CQ

11-Aug: Comment from Wayne:
There is third-party code in this contribution from Maven. Why is this code
copied rather than just compiled against the Maven libraries directly?
If you do need to copy the Maven code, that code should be contributed via a separate CQ.

11-Aug Response 

08-Aug: Code submitted in Bugzilla and CQ -
Possible issue:

The git-2.0.0.hpi file is an embedded archive that needs to be separately
contributed (I assume that it's a third-party library). That file contains
several other libraries (including jGit); the third-party stuff will require
separate CQs (JGit should not require a CQ as it is an Eclipse project).

11-Aug: Logged Hudson issue to extract HPI

2-Sep: Uploaded new version without the HPI to CQ and Bugzilla

12-Aug: about.html added to contribution. Bugzilla record updated by Winston. Upload into CQ by Duncan

06-Sept-2011 - Query about the source of images from Wayne:

These libraries each need to be entered as separate CQs, unless you have been explicitly instructed otherwise by Janet. What is the source of the images?