Questions about including third-party libraries

I’ve already read the doc about this:

but still have questions.

a) What do I actually need to write in reviewer notes if I got the libraries via npm, assuming no minified versions were used and no bundlers, so library files are included as is? And do I need to include package.json / package-lock.json in the addon?
b) What about the licenses? Do I need to collect a license file from each library and include it in the addon? Do all used libraries need to be mentioned in addon description? Do their licences need to be linked there?