Update License List to v3.21, remove checking for ids end with +

[cbsMartin]

• All licenses that ends with + now are deprecated.
• Update License List to v3.21

[kemitchell]

Are these licenses not marked deprecated in SPDX's JSON?

[cbsMartin]

Are these licenses not marked deprecated in SPDX's JSON?

From the official document with all SPDX license they are marked as deprecated but in current logic they are skipped.

[kemitchell]

Oh, boy.

SPDX has done something drastic with their license IDs, and I've yet to read my way up on it. If + is now a valid identifier character, we are going to have fun times in the expression parser, too.

[kemitchell]

I've reached out to SPDX for clarification.

I suspect, but do not yet know, that they added some license expressions to the license list, just for the purpose of deprecating them. That's expressing the idea that they would rather see "GPL-2.0-or-later" than "GPL-2.0+", but not that "GPL-2.0" itself is a valid license ID, such that "GPL-2.0++" would be a valid license expression.

We'll see.

[kemitchell]

I've gone ahead and matched v3.21 of the SPDX list in spdx-license-ids@3.0.14. Will wait for response from them to decide what to do about filtering or not filtering IDs ending in +.

[kemitchell]

Gary O'Neall from SPDX confirms there are in fact IDs that end in "+", and they are all deprecated now. I've cherry-picked your bf86ce2 and pushed to main.