Fix typos in 3.0.1 spec

[bact]

SPDX license expressions annex

Fix typo in SPDX license expressions annex as reported by @brokenjpl

• AdditonRef -> AdditionRef
• will fix AdditionRef typo in spec document #1086

Conformance chapter

Fix typos in Conformance chapter as reported by @vargenau

• Profile counts: six compliance points -> nine compliance points
  • Will fix I count 9 profiles, not 6. #1081
• Profile name: Licensing -> Licensing
  • Will fix Licencing or Licensing? #1082

Symbols chapter

Fix typos in the Symbols chapter as reported by @vargenau + additional typos

• 3T-SBOM
  • Tool-to-Tool Software Bill of Material --> Tool-to-Tool Software Bill of Materials Exchange
  • ref: https://www.it-cisq.org/software-bill-of-materials/
• BOM / SBOM
  • Bill of Material --> Bill of materials
  • Software Bill of Material -> Software bill of materials
  • will fix "Bill of Material" --> "Bill of Materials" #1079
• CISA
  • Cybersecurity and Information Security Agency --> Cybersecurity and Infrastructure Security Agency
  • ref: https://www.cisa.gov/
• CISQ
  • Center for Information and Security Quality --> Consortium for Information & Software Quality
  • ref: https://www.it-cisq.org/
• CPE
  • Common Package Enumeration --> Common Platform Enumeration
  • ref: https://nvd.nist.gov/products/cpe
• CVE
  • Common Vulnerabilies and Exposures --> Common Vulnerabilities and Exposures
• JSON-LD
  • JavaScript Object Notation for Linked Data --> JSON-LD | JavaScript Object Notation for Linking Data
  • ref: https://github.com/json-ld/json-ld.org, https://json-ld.org/
  • note: JSON-LD 1.1 spec has a subtitle "A JSON-based Serialization for Linked Data" but has not specified what JSON-LD stands for.
• NISTIR
  • National Institute of Standards and Technology Internal/Interagency Reports -> NIST Internal or Interagency Report
  • ref: https://csrc.nist.rip/publications/PubsNISTIRs.html
  • note: It is a singular term referring to a particular numbered report (NISTIR 8259, NISTIR 8286, etc). Plural is NISTIRs. / NIST | National Institute of Standards and Technology is also added, as NIST is mentioned elsewhere in the spec but not yet in the Symbols table.
• PURL
  • Package Uniform Resource Identifier -> Package URL
  • ref: https://spdx.github.io/spdx-spec/v3.0.1-draft/annexes/pkg-url-specification/
  • will fix "PURL Package Uniform Resource Identifier" should be "Package URL" #1083
• RFC
  • Request for Comment --> Request For Comments
  • ref: https://www.ietf.org/process/rfcs/
• SSVC
  • Stakeholder- Specific Vulnerability Categorization --> Stakeholder-Specific Vulnerability Categorization (without space between '-' and 'Specific')
• SWHID
  • SoftWare Heritage persistent IDentifiers --> SoftWare Hash IDentifiers
  • ref: https://www.swhid.org/
  • will fix "SWHID SoftWare Heritage persistent IDentifiers" should be "SoftWare Hash IDentifiers" #1080
• VEX
  • Vulnerability Exploitable eXchange --> Vulnerability Exploitability eXchange
  • ref: https://www.ntia.gov/files/ntia/publications/vex_one-page_summary.pdf
  • note: the NTIA document uses both "Vulnerability Exploitability eXchange" and "Vulnerability-Exploitability eXchange"

[bact]

@bobmartin3000 please kindly review.

[goneall]

LGTM - Thanks @bact

[maxhbr]

LGTM

[kestewart]

Couple of tweaks, after those are sorted, should be good to merge.