SPDX license and identifier lookup