diff --git a/doc/requirements.txt b/doc/requirements.txt
index 08de827af..ff4118618 100644
--- a/doc/requirements.txt
+++ b/doc/requirements.txt
@@ -1,5 +1,5 @@
 openstackdocstheme>=2.2.1 # Apache-2.0
 reno>=3.1.0 # Apache-2.0
 sphinx>=2.1.1 # BSD
-sphinxcontrib-httpdomain>=1.8.1
-sphinxcontrib-pecanwsme>=0.10.0
+sphinxcontrib-httpdomain>=1.8.1 # BSD
+sphinxcontrib-pecanwsme>=0.10.0 # BSD
diff --git a/requirements.txt b/requirements.txt
index d5277ce40..b514d7232 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -1,10 +1,14 @@
-tenacity>=3.2.1  # Apache-2.0
+# Requirements lower bounds listed here are our best effort to keep them up to
+# date but we do not test them so no guarantee of having them all correct. If
+# you find any incorrect lower bounds, let us know or propose a fix.
+
+tenacity>=3.2.1 # Apache-2.0
 croniter>=0.3.4 # MIT License
-futurist>=0.11.0  # Apache-2.0
+futurist>=0.11.0 # Apache-2.0
 jsonschema>=3.2.0 # MIT
 keystonemiddleware>=5.1.0 # Apache-2.0
-gnocchiclient>=6.0.0  # Apache-2.0
-lxml>=2.3
+gnocchiclient>=6.0.0 # Apache-2.0
+lxml>=2.3 # BSD
 oslo.db>=11.0.0 # Apache-2.0
 oslo.config>=6.8.0 # Apache-2.0
 oslo.i18n>=1.5.0 # Apache-2.0
@@ -12,25 +16,25 @@ oslo.log>=4.3.0 # Apache-2.0
 oslo.reports>=1.18.0 # Apache-2.0
 oslo.policy>=3.11.0 # Apache-2.0
 oslo.upgradecheck>=1.3.0 # Apache-2.0
-PasteDeploy>=1.5.0
+PasteDeploy>=1.5.0 # MIT
 pbr>=2.0.0 # Apache-2.0
-pecan>=0.8.0
+pecan>=0.8.0 # BSD
 oslo.messaging>=5.2.0 # Apache-2.0
 oslo.middleware>=3.22.0 # Apache-2.0
 oslo.utils>=4.7.0 # Apache-2.0
-python-keystoneclient>=1.6.0
-requests>=2.5.2
+python-keystoneclient>=1.6.0 # Apache-2.0
+requests>=2.5.2 # Apache-2.0
 stevedore>=1.5.0 # Apache-2.0
-SQLAlchemy>=1.4.1
+SQLAlchemy>=1.4.1 # MIT
 tooz>=1.28.0 # Apache-2.0
-voluptuous>=0.8.10
-WebOb>=1.2.3
-WSME>=0.12.1
-cachetools>=1.1.6
-cotyledon>=1.7.3
-keystoneauth1>=2.1
-python-observabilityclient>=0.0.4
-python-octaviaclient>=1.8.0
-python-dateutil>=2.8.2  # BSD
-python-heatclient>=1.17.0
-tzdata>=2022.4
+voluptuous>=0.8.10 # BSD
+WebOb>=1.2.3 # MIT
+WSME>=0.12.1 # MIT
+cachetools>=1.1.6 # MIT
+cotyledon>=1.7.3 # Apache-2.0
+keystoneauth1>=2.1 # Apache-2.0
+python-observabilityclient>=0.0.4 # Apache-2.0
+python-octaviaclient>=1.8.0 # Apache-2.0
+python-dateutil>=2.8.2 # BSD
+python-heatclient>=1.17.0 # Apache-2.0
+tzdata>=2022.4 # MIT
diff --git a/test-requirements.txt b/test-requirements.txt
index 9fc84fcb7..a789cb859 100644
--- a/test-requirements.txt
+++ b/test-requirements.txt
@@ -1,8 +1,8 @@
 stestr>=2.0.0 # Apache-2.0
 oslotest>=2.15.0 # Apache-2.0
-coverage>=3.6
-fixtures>=1.3.1
+coverage>=3.6  # Apache-2.0
+fixtures>=1.3.1 # Apache-2.0/BSD
 SQLAlchemy-Utils>=0.39.0
 gabbi>=1.30.0 # Apache-2.0
 # Provides subunit-trace
-WebTest>=3.0.0
+WebTest>=3.0.0 # MIT