Which has the higher priority in your organization: Deploying a new database or securing the ones you already have?
Looking for a website, and resources, dedicated solely to securing Oracle databases? Check out DBSecWorx.
Undocumented but believed to be part of Advanced Replication which was dropped from the product. Why this particular package remains is not known but based on the security model it appears related to the Import Utility and/or DataPump.
Owned by SYS with EXECUTE granted to the IMP_FULL_DATABASE