FYI my company acquired SourceForge in 2016 and have been improving significantly. No more bundled adware, eliminated deceptive ads, all projects are scanned for malware, https downloads and project web hosting, 2-factor auth & more. Big redesign coming soon too. This is a great thread, but I just wanted to let everyone know the shady practices in the OP are no more.

For those interested in more information I did an AMA here: https://www.reddit.com/r/sysadmin/comments/4n3e1s/the_state_...

And Ars coverage here: https://arstechnica.com/information-technology/2016/06/under...