package version metadata for external/

This will be used for automated notification of external vulnerability
reports.

Change-Id: I285ccc778c1e2a2bc66daf31ec905bda2abda66b
diff --git a/README.version b/README.version
new file mode 100644
index 0000000..7b453eb
--- /dev/null
+++ b/README.version
@@ -0,0 +1,4 @@
+URL: http://archive.apache.org/dist/xml/xalan-j/xalan-j_2_7_1-src.tar.gz
+Version: 2.7.1
+BugComponent: 1351
+AllAdvisories: yes