There should be an automated test to check that all source code in the project has the SPDX Identifier, and, in case of third_party tools, that the LICENSE file is present.

This script can be used and changed accordingly to the source file-types by adding/removing the correct extensions