Please update the SPDX licenses to 3.0. See the parallel bug at hughsie/appstream-glib#225

data/spdx-license-ids.txt says it's up to date as of 2.5 but I think appstream and appstream-glib need to be kept in sync.