fix spdx file annotation

Each  file, usually  source and  patch tarball  needs to  be annotated
within the  SPDX package section. In  some cases there only  the patch
tar ball  exists where we  shall not integrate  an empty file  name to
avoid error message in SPDX viewer.

Furhtermore  this  commit addresses  an  issue  with the  license  tag
"Artistic-1.0-Perl" which is not supported by SPDX version 1.1.

Signed-off-by: Otto Linnemann <otto.linnemann@peiker.de>
add-on info for package hostap, GPL default license

Signed-off-by: Otto Linnemann <otto.linnemann@peiker.de>