https://fossforce.com/2016/12/securing-sourceforge/