I thought Sourceforge had been compromised by bad people and should be avoided on principle.