I don’t have any of the widgets installed currently and I just tried to install the Security widget. It installed the keypad widget instead. It looks like, in your security widget post because the link to the yaml for the keypad:
comes before the actual link to the security widget, that the add-on store is accessing the keypad code instead.