regarding Tom’s comment on this topic: So this is the difficulty. We know of an order of magnitude of different
variants of BSD and MIT (many of which are unclassified by the OSI and
SPDX). They're all functionally identical. Are you volunteering to audit
all the Fedora packages to correct the license tags? I'm not. :)
I could be possible to come up with a correlation of the Fedora tags and SPDX ids (where Fedora groups licenses under one age, but SPDX uses different ones) and then automate updating the tags, no?
I have a summary of the work done thus far to align and a spreadsheet from a few years ago with the correlation. It would need updating on both sides, but it could provide a decent start.
SPDX legal team