deps: use forked spdx-compare with fixed dependencies

package.json

@@ -5,6 +5,12 @@
     "taim": "^1.1.0",
     "yargs": "^7.1.2"
   },
+  "overrides": {
+    "spdx-compare": "git+https://github.com/legobeat/spdx-compare.js#c63092e848be052139aacffac0d8be0518fddc14"
+  },
+  "resolutions": {
+    "license-checker>spdx-satisfies>spdx-compare": "git+https://github.com/legobeat/spdx-compare.js#c63092e848be052139aacffac0d8be0518fddc14"
+  },
   "name": "@metamask/oss-attribution-generator",
   "description": "utility to parse bower and npm packages used in a project and generate an attribution file to include in your product",
   "version": "2.0.1",
@@ -15,7 +21,8 @@
     "index.js"
   ],
   "engines": {
-    "node": ">=14.0.0"
+    "node": ">=14.0.0",
+    "npm": ">=8.3.0"
   },
   "scripts": {
     "test": "mocha test"