SBOM tool doesn't cross-check libexpat version and checksum against refresh.sh

[sethmlarson]

Bug report

Bug description:

There's a bad comparison against the magic string == "libexpat" where it should check against == "expat" for the package name. This means that SBOM data for expat doesn't get cross-checked automatically against the refresh.sh script.

Found while reviewing #139319

CPython versions tested on:

CPython main branch

Operating systems tested on:

No response

Linked PRs

• gh-139330: Check expat version/checksum in SBOM with refresh.sh #139331
• [3.14] gh-139330: Check expat version/checksum in SBOM with refresh.sh #139336
• [3.13] gh-139330: Check expat version/checksum in SBOM with refresh.sh #139337
• [3.12] gh-139330: Check expat version/checksum in SBOM with refresh.sh #139338
• [3.12] gh-139330: Check expat version/checksum in SBOM with refresh.sh #139339