After taking down the controversial DevShare program in early February, the new owners of popular software repository, SourceForge, have begun scanning all projects it hosts for malware in an attempt to regain trust that was lost by Dice Holdings, the site’s previous owners.
It appears as if the new owners at SourceForge are serious about fixing the mistakes made by the site’s previous owners. FOSS Force has learned that as of today, the software repository used by many free and open source projects is scanning all hosted projects for malware. Projects that don’t make the grade will be noticeably flagged with a red warning badge located beside the project’s download button.
According to a notice posted on the SourceForge website this afternoon, the scans look for “adware, viruses, and any unwanted applications that may be intentionally or inadvertently included in the software package.” Account holders with projects flagged as containing malware will be notified by SourceForge.
This isn’t the first time they’ve done this. Last year they handed out $125,000 to five projects — meaning that this year they’ve nearly doubled down on their bet. Last year’s donations included money going to the Electronic Frontier Foundations Privacy Badger — a browser add-on that stops advertisers and other trackers from following users — and Girl Develop It for its Open Source Mentorship program.
In a nutshell, the Mozilla Foundation finds that continuing to maintain and development Thunderbird distracts from its current focus of getting Firefox back on track. Thunderbird is a huge project, requiring much in the way of resources, but has a user base that’s been in decline since 2012, as many users are turning away from desktop email clients in favor of web based email services.