I think NumPy still uses SourceForge.
Do you know if there's any plans to move away from SourceForge? If I was in charge of the project, I'm not sure what I'd do. Maybe move all active development to github, but not abandon the SF repo to malware injection?