In fact, it's just as simple as that: every package today has a license. If the license says that the author has no responsibility and liability for it - so it is. If the package has no license - you cannot use it in commercial software anyway.