register spdx lib as ES Module, start converting call sites to use new spdx pkg - TODO: update tests

types/spdx-license-satisfies.d.ts

@@ -0,0 +1,6 @@
+declare module '@onebeyond/spdx-license-satisfies' {
+  export function satisfies(
+    candidateExpr: string,
+    constraintExpr: string
+  ): boolean
+}