spack audit externals
The problem was that `+` is part of the regex grammar, so it needs to be escaped.