Submissions are limited to Apache 2.0 and FAQ asks to contact for other license options. So GPL2 is out?

Looks like if you have GPL dependencies, they need to live inside ./third_party/foo/LICENSE