A curated watchlist and dataset of risky open-source repositories, published as CSV, JSON and SQLite for reference.