Is it safe to trust binaries hosted from sourceforge? Didn't they used to host modified binaries / packages with malware?
> After SourceForge was sold to BizX in 2016, DevShare was discontinued. On May 17, 2016, SourceForge announced that they were now scanning all projects for malware, and displaying warnings on projects detected to have malware.