Found some content bugs in the create-program guide

[justinabrahms]

I'm going through a bunch of the guides today. And noticed a few things here: https://todogroup.org/guides/create-program/

This is missing some content:

Unless your open source projects are housed at a neutral foundation, you’ll want to […]

This could use a link:

(See our guide on Using and Distributing Open Source Code.)

Comments in the source

For example, the [I think we need to mention SPDX and OpenChain tools from The Linux Foundation, along with help from your and working with internal supply chain teams, will internally to ensure that code brought in by third parties is also compliant.]