spdx_license_once added

fix issues: verification code, package declared license