[Haskell-cafe] SPDX and hackage