Some SPDX expressions located in package.json can be invalid, full license
name instead of SPDX code for instance.

In order to workaround this type of issues, use the spdx-correct package
enabling to get correct SPDX expression from an invalid one based on
some heuristics.