spdx validation for appstream
http://metadata.neon.kde.org/appstream/html/xenial/main/issues/plasma-sdk.html