Use licenses field from package.json
Return null if license cannot be sniffed