I probably have a more comprehensive suggestion somewhere, but I'll include here the one that is simplest to get something done with.
Here's at least one attempt to soften the blow when the day comes to disable custom widgets by default:
- Have a repo containing all "public" widgets
- Every once in a while hash the widgets files, and store this list of hashes