This should be part of the validation. There can only be a single element per SPDX id.