fix(spdx): guard against panic on empty license expressions - #3023

Warning: Code scanning cannot determine the alerts introduced by this pull request, because 1 configuration present on refs/heads/main was not found:

Actions workflow (prerelease-check.yml)

• ❓  .github/workflows/prerelease-check.yml:osv-scan

View all branch alerts.