When an NPM package misdeclared its "licenses" as a Hash, deal with it.

When an NPM package misdeclared its "licenses" as a Hash (and not an array of hashes), deal with it. :sunglasses:

For example, see grunt-concurrent v0.5.0.

Fixes #108.