Check an SPDX license identifier (MIT, Apache-2.0, BSD-3-Clause, GPL-3.0-only, UNLICENSED) for commercial use and copyleft obligations.