Ash is going down path of reuse.software compliant licenses to aid with software BOM, see https://reuse.software/