The spectre-meltdown-checker.sh file is missing licensing information. The SPDX identifier is a legally binding shorthand, which can be used instead of the full boiler plate text.