Just check this out: Debian taking 3 years!!!!! to resolve their usual openssl vs. GPL license issue for a already prepared .deb package.
Currently they’re discussing it. Currently means: for 3 months now.
So kids, that’s why there is no premade package for OSSEC. On the other hand this doesn’t remotely explain why the source package isn’t made available.