Risk report: Three years of Red Hat Enterprise Linux 4

There are lists of packages in a default install available already (cpe lists) at:
http://www.redhat.com/security/data/metrics/

But they're not the full package lists.  I do intend to eventually add some of the full
package lists for given combinations of rhel versions over time and where useful for stats.