[cpburns2009]

A curated list of stable packages won't accomplish anything. A compromised package can just as easily be published as a security update.