Match license by URL

[jakub-bochenski]

Current Behavior

If I understand correctly the code at

dependency-track/src/main/java/org/dependencytrack/tasks/BomUploadProcessingTask.java

Line 724 in 6db3593

private static void resolveAndApplyLicense(

license is matched by SPDX ID or by name.

Proposed Behavior

License names can be misspelled, matching by license URL seems more robust.
E.g. SPDX maven plugin matches licenses by URL

To preserve backwards compatibility the matching by URL should be added as last attempt

Checklist

• I have read and understand the contributing guidelines
• I have checked the existing issues for whether this enhancement was already requested