Welcome to dependency hell.

But then many packages are so trivial that they shouldn't even require a license.

Same goes for abandoned projects.