SPDX Could Help Organizations Better Manage Their Thickets of Open Source Licenses