The last distros I've used that didn't really have their own package managers were Slackware (it is just a tarball) and PuppyLinux (adopted from slackware or debian).
Anyway, Slitaz is here https://repology.org/repository/slitaz_cooking
I don't think outdated packages are that big of a deal, as long as they work in the first place.
I can't access some websites like Twitter, Reddit, and Slack, but I consider that to be an advantage.
It came with this one installed, and I'm gonna let it stay for the time being.
Also, the installed browsers are already a bit on the slow side, and I can imagine they would only get slower if I upgraded them.
I verify this in the Network Monitor pane.
Otherwise, I do not consider them trustworthy.