Repository: composer/satis (language: php)

Issue:
phar error: "vendor/composer/spdx-licenses/res/spdx-licenses.json" is not a file
**Describe the bug**
Under certain circumstances, `php satis.phar build` throws an error:
```
In PackageRepository.php line 57:
                                                                                                                                                                                  
  A repository of type "package" contains an invalid package definition: file_get_contents(phar:///***/satis/satis.phar/vendor/composer/spdx-licenses/res/spdx-lice  
  nses.json): Failed to open stream: phar error: "vendor/composer/spdx-licenses/res/spdx-licenses.json" is not a file in phar "/***/satis/satis.phar"                
                                                                                                                                                                                  
  Invalid package definition:                                                                                                                                                     
  {"name":"onspli\/composer-test-package","license":"CAUSES_ERROR"}
```

**To Reproduce**
satis.json:
```json
{
  "name": "onspli/satis-test-repo",
  "homepage": "http://packages.example.org",
  "output-dir": "output",
  "repositories": [
    {
      "type": "package",
      "package": [
        {
          "name": "onspli/composer-test-package",
          "version": "dev-test",
          "license": "CAUSES_ERROR"
        }
      ]
    }
  ]
}
```
execute:
```sh
$ box compile
$ php satis.phar build
```

**Expected behavior**
Successful build.

**Proposed fix**
Add `vendor/composer/spdx-licenses/res/*.json` to `box.json`.



Discussion / hints:

Fix patch:
diff --git a/box.json b/box.json
index bde0f895..8f8f208d 100644
--- a/box.json
+++ b/box.json
@@ -21,6 +21,10 @@
         {
             "name": "cacert.pem",
             "in": "vendor/composer/ca-bundle"
+        },
+        {
+            "name": "*.json",
+            "in": "vendor/composer/spdx-licenses/res"
         }
     ],
     "compression": "GZ",


Test patch: