Use SPDX ID of license in package.json