It would be easy to overlook a change/addition to the bundled licences, so suggest an automated check that they’re still as specified in the .spec.
.spec
Just jq please.
jq
IMO this should be made into a macro in nodejs-packaging, and the dependency added there.
Note that the current implementation is also a bit simplistic, and will break as soon as one of the components is dual-licensed (among other things).
join(" AND ") only works for simple cases like "MIT" or "BSD-3-Clause" but it is not uncommon for projects to be dual-licensed these days (like MIT OR Apache-2.0), and the simple "concatenate with " AND "" will result in broken SPDX expressions, and cannot match the License tag of the package (or rather, it shouldn't - because if it did, then the package's License tag would be wrong, too).
join(" AND ")
MIT OR Apache-2.0
" AND "
It would be easy to overlook a change/addition to the bundled licences, so suggest an automated check that they’re still as specified in the
.spec.