Proposal: Change cardinality of specVersion to required

[goneall]

Not having the specVersion in the creation info will make certain validation, conversion and parsing unreliable.

Note that this is already required in SPDX 2.3 and all previous versions.

[davaya]

Yes.

[armintaenzertng]

I absolutely agree, no version info will totally trip up tooling.

I opened #422 to fix this.

[armintaenzertng]

While we are at it, should dataLicense be mandatory, too? (If this requires more discussion, we can open a separate issue.)

[goneall]

While we are at it, should dataLicense be mandatory, too? (If this requires more discussion, we can open a separate issue.)

There is a change proposal to make the dataLicense optional - so we should wait until that is resolved before changing.