update the SPDX license hashMap