spdx_license_once upload

fix issues: verification code, package declared license