feat(validate): warn on deprecated SPDX license identifiers

Mirror Composer's Util\ConfigValidator::validate() license handling:
treat empty string and empty array as missing, accept array form, and
emit deprecation warnings (with GPL-specific -only/-or-later
suggestions) for identifiers flagged deprecated in the SPDX database.

1 files changed, 4 insertions, 0 deletions

diff --git a/crates/mozart-core/src/validation.rs b/crates/mozart-core/src/validation.rs
index 24f1705..7b97666 100644
--- a/crates/mozart-core/src/validation.rs
+++ b/crates/mozart-core/src/validation.rs
@@ -55,6 +55,10 @@ pub fn validate_license(s: &str) -> bool {
     mozart_spdx_licenses::spdx().validate(s)
 }
 
+pub fn is_license_deprecated(s: &str) -> bool {
+    mozart_spdx_licenses::spdx().is_deprecated(s)
+}
+
 pub fn validate_autoload_path(s: &str) -> bool {
     AUTOLOAD_PATH_RE.is_match(s)
 }