update licenses after package-lock.json was updated

.licenses/npm/spdx-exceptions.dep.yml

@@ -0,0 +1,47 @@
+---
+name: spdx-exceptions
+version: 2.3.0
+type: npm
+summary: list of SPDX standard license exceptions
+homepage: 
+license: cc-by-3.0
+licenses:
+- source: README.md
+  text: |
+    The package exports an array of strings. Each string is an identifier
+    for a license exception under the [Software Package Data Exchange
+    (SPDX)][SPDX] software license metadata standard.
+
+    [SPDX]: https://spdx.org
+
+    ## Copyright and Licensing
+
+    ### SPDX
+
+    "SPDX" is a federally registered United States trademark of The Linux
+    Foundation Corporation.
+
+    From version 2.0 of the [SPDX] specification:
+
+    > Copyright © 2010-2015 Linux Foundation and its Contributors. Licensed
+    > under the Creative Commons Attribution License 3.0 Unported. All other
+    > rights are expressly reserved.
+
+    The Linux Foundation and the SPDX working groups are good people. Only
+    they decide what "SPDX" means, as a standard and otherwise. I respect
+    their work and their rights. You should, too.
+
+    ### This Package
+
+    > I created this package by copying exception identifiers out of the
+    > SPDX specification. That work was mechanical, routine, and required no
+    > creativity whatsoever. - Kyle Mitchell, package author
+
+    United States users concerned about intellectual property may wish to
+    discuss the following Supreme Court decisions with their attorneys:
+
+    - _Baker v. Selden_, 101 U.S. 99 (1879)
+
+    - _Feist Publications, Inc., v. Rural Telephone Service Co._,
+      499 U.S. 340 (1991)
+notices: []