https://wp.jochen.hayek.name/blog-en/2011/08/23/spdx-version-1-0-released-compliance-made-easier-the-h-open-source-news-and-features/