This has just shown up on twitter for me: https://reuse.software/practices/2.0/ It gives us the set of sensible places to look at to find license information. They also have a linter to check repositories (not sure if that will be useful, but it's at https://git.fsfe.org/reuse/reuse).