Don't forget the SourceForge rug pull, when the once definitive central source of truth was bought out and became a venue for malware