The box-react-ui references the following page, for the box-ui-license, but there is nothing there:
https://developer.box.com/docs/box-sdk-license
Additionally, the Git repo, linked from the package.json, shows an invalid certificate for the host:
https://git.dev.box.net/Box/box-react-ui.git
This is currently a concern, since without a clear license document we can't use box-ui-elements, in our firm, which depends on this.