A package that does not contain vulnerable code, but depends on another vulnerable package. Created for security scans/checks.