gpl-2.0 false positive (should be "or later")

[armijnhemel]

Description

Please leave a brief description of the bug or feature request:

https://github.com/mirror/busybox/blob/master/procps/smemcap.c#L6

 This software may be used and distributed according to the terms of
 the GNU General Public License version 2 or later, incorporated
 herein by reference.

is recognized as:

    {
      "identifier": "gpl_2_0-86fd3fbe-6fae-f781-8226-b9b3e4ac3151",
      "license_expression": "gpl-2.0",
      "license_expression_spdx": "GPL-2.0-only",
      "detection_count": 1,
      "reference_matches": [
        {
          "license_expression": "gpl-2.0",
          "license_expression_spdx": "GPL-2.0-only",
          "from_file": "busybox-1.34.1/procps/smemcap.c",
          "start_line": 6,
          "end_line": 8,
          "matcher": "3-seq",
          "score": 92.0,
          "matched_length": 23,
          "match_coverage": 100.0,
          "rule_relevance": 100,
          "rule_identifier": "gpl-2.0_470.RULE",
          "rule_url": "https://github.com/nexB/scancode-toolkit/tree/develop/src/licensedcode/data/rules/gpl-2.0_470.RULE"
        }
      ]
    },

[kx7m2qd]

Hi @firefart — looks like xmlrpc 0.3.3 may have been yanked from RubyGems. I can look into updating the version constraint in Gemfile.lock. Is this still available to work on?