catalog: backfill license_spdx on 10 entries, clarify publisher rule (batch A)

Extend site/spdx-allowed.json with the seven identifiers the catalog already
implies: BSD-2-Clause, BSD-3-Clause, CDLA-Permissive-2.0, GPL-2.0-or-later,
ISC, MPL-2.0, ODbL-1.0.

Backfill license_spdx on the 10 entries whose license value maps to exactly
one SPDX identifier. Coverage 209/294 (71.1%) -> 219/294 (74.5%). No verified:
date is touched: this restates an existing field, it is not a re-verification.

The 15 entries carrying license: GPL-3.0 or GPL-2.0 are deliberately left
alone. SPDX deprecated the bare identifiers and the correct one is -only or
-or-later, which the recorded value does not state. Choosing between them is a
per-project license read, not a mechanical restatement, so it is deferred
rather than guessed.

Clarify the publisher rule in CONTRIBUTING rather than deleting the field from
the three single-entry publishers. The rule's real prohibition is generic
hosts; "more than one entry" reads as when the field is expected, not as a
gate, and removing accurate rights-holder data to satisfy it would lose
information. Records the Blender Foundation vs Blender Studio distinction as
the worked example and marks the publisher list illustrative, since a
hand-maintained list drifts on every addition.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Wc67NX9MM964uaVGn4bpZJ

Author: TMHSDigital

CONTRIBUTING.md

@@ -41,7 +41,7 @@ One new markdown file is enough — the website rebuilds from frontmatter on dep
 - `commercial`: `true` / `false` / `unknown` / `varies`. Use `varies` for aggregators where some files are commercial-ok and others are not. The site still shows these under Commercial OK, labeled **per-file review**, so they are not silently excluded and not silently treated as a blanket grant.
 - `attribution_required`: `true` / `false`.
 - `attribution_string`: optional copy-paste credit.
-- `publisher`: optional. Set when the same rights-holding publisher has more than one catalog entry (Kenney, Quaternius, KayKit, Google Fonts, OpenGameArt, LuizMelo, 0x72, Blender Studio, Material Maker, Tiny Speck, Screaming Brain Studios, Sparklin, Alif Type, GGBotNet, 3dmodelscc0). Do not set this to a generic host (GitHub, Hugging Face).
+- `publisher`: optional. Name the **rights-holding publisher**, never the host. Set it whenever that publisher has more than one catalog entry, so the entries group; setting it on a publisher that currently has only one entry is also fine and saves a backfill later. Do not set it to a generic host (GitHub, Hugging Face, itch.io) or to a distributor that does not hold the rights. Distinguish sibling organisations that are genuinely different rights holders — `blender.md` (the application, Blender Foundation) carries no `publisher`, while the asset bundles under `studio.blender.org` carry `Blender Studio`. Kenney, Quaternius, KayKit, Google Fonts, OpenGameArt, LuizMelo, 0x72, Blender Studio, Material Maker, Alif Type, GGBotNet and 3dmodelscc0 are the largest groups in use today; treat that as illustrative, not as the permitted set.
 - `grid_dimensions` / `camera_perspective` / `hardware_tags`: optional 2D/UI metadata.
 - `verified`: ISO date (`YYYY-MM-DD`) of your last license check.
 - `status`: `active` | `needs-review` | `deprecated`.

catalog/2d/lucide-icons.md

@@ -5,6 +5,7 @@ url: https://lucide.dev/
 category: 2d
 subcategories: [icons, ui]
 license: ISC
+license_spdx: ISC
 commercial: true
 attribution_required: false
 formats: [SVG]

catalog/environment/ms-building-footprints.md

@@ -6,6 +6,7 @@ publisher: Microsoft
 category: environment
 subcategories: [geodata, buildings]
 license: CDLA-Permissive-2.0
+license_spdx: CDLA-Permissive-2.0
 commercial: true
 attribution_required: true
 attribution_string: "Microsoft Global ML Building Footprints (CDLA Permissive 2.0). Suggested; include the CDLA text when redistributing the Data files."

catalog/environment/openstreetmap.md

@@ -5,6 +5,7 @@ url: https://www.openstreetmap.org
 category: environment
 subcategories: [geodata, maps]
 license: ODbL
+license_spdx: ODbL-1.0
 commercial: true
 attribution_required: true
 attribution_string: "© OpenStreetMap contributors"

catalog/tools/assimp.md

@@ -5,6 +5,7 @@ url: https://github.com/assimp/assimp
 category: tools
 subcategories: [pipeline, conversion]
 license: BSD-3-Clause
+license_spdx: BSD-3-Clause
 commercial: true
 attribution_required: false
 formats: [FBX, glTF, OBJ, DAE, many]

catalog/tools/blender.md

@@ -5,6 +5,7 @@ url: https://www.blender.org
 category: tools
 subcategories: [dcc, modeling, animation]
 license: GPL-2.0-or-later
+license_spdx: GPL-2.0-or-later
 commercial: true
 attribution_required: false
 formats: [Blend, glTF, FBX, OBJ, USD]

catalog/tools/colmap.md

@@ -5,6 +5,7 @@ url: https://colmap.github.io
 category: tools
 subcategories: [photogrammetry, pipeline]
 license: BSD-3-Clause
+license_spdx: BSD-3-Clause
 commercial: true
 attribution_required: false
 formats: [BIN, TXT, PLY, OBJ]

catalog/tools/daltonlens.md

@@ -5,6 +5,7 @@ url: https://github.com/DaltonLens/DaltonLens
 category: tools
 subcategories: [accessibility]
 license: BSD-2-Clause
+license_spdx: BSD-2-Clause
 commercial: true
 attribution_required: false
 formats: [desktop]

catalog/tools/instant-meshes.md

@@ -5,6 +5,7 @@ url: https://github.com/wjakob/instant-meshes
 category: tools
 subcategories: [remesh, pipeline]
 license: BSD-3-Clause
+license_spdx: BSD-3-Clause
 commercial: true
 attribution_required: false
 formats: [OBJ]

catalog/tools/meshroom.md

@@ -5,6 +5,7 @@ url: https://alicevision.org
 category: tools
 subcategories: [photogrammetry, pipeline]
 license: MPL-2.0
+license_spdx: MPL-2.0
 commercial: true
 attribution_required: false
 formats: [OBJ, ABC, EXR, SFMdata]