SourceForge

SourceForge is a web-based service that offers software developers a centralized online location to control and manage free and open-source software projects. It provides a source code repository, bug tracking, mirroring of downloads for load balancing, a wiki for documentation, developer and user mailing lists, user-support forums, user-written reviews and ratings, a news bulletin, micro-blog for publishing project updates, and other features.

SourceForge
The SourceForge logo
Screenshot of SourceForge main page in 2018
Type of site
Collaborative revision control, software development management system
OwnerSlashdot Media[1]
BIZX, LLC (2016-2019)[2]
DHI Group, Inc. (2012-2016)
Geeknet, Inc. (1999-2012)
Created byVA Software
Key peopleLogan Abbott (President)[3][4]
URLsourceforge.net
Alexa rank 365 (February 2019)[5]
CommercialYes
RegistrationOptional (required for creating and joining projects)
LaunchedNovember 1999 (1999-11)
Current statusOnline

SourceForge was one of the first to offer this service free of charge to open-source projects.[6] Since 2012, the website has run on Apache Allura software. SourceForge offers free access to hosting and tools for developers of free and open-source software.

As of March 2014, the SourceForge repository claimed to host more than 430,000 projects and had more than 3.7 million registered users.[7] The domain sourceforge.net attracted at least 33 million visitors by August 2009 according to a Compete.com survey.[8]

From mid-2013 SourceForge introduced a program called DevShare, which offered projects a way to monetize their downloads by having an optional download that includes prompts for the user to download additional software that is not part of the project. Negative community reactions to the partnership program led to a review of the program, which was nonetheless opened up to all SourceForge projects on February 7, 2014.[9][10] The program was cancelled by new owners BIZX, LLC on February 9, 2016;[11] on May 17, 2016 they announced that it would scan all projects for malware and display warnings on downloads.[12]

Concept

SourceForge is a web-based source code repository. It acts as a centralized location for free and open-source software projects. It was the first to offer this service for free to open-source projects. Project developers have access to centralized storage and tools for managing projects, though it is best known for providing revision control systems such as CVS, SVN, Bazaar, Git and Mercurial.[13] Major features (amongst others)[14] include project wikis, metrics and analysis, access to a MySQL database, and unique sub-domain URLs (in the form http://project-name.sourceforge.net).

The vast number of users at SourceForge.net (over 3 million as of 2013)[8] exposes prominent projects to a variety of developers and can create a positive feedback loop. As a project's activity rises, SourceForge.net's internal ranking system makes it more visible to other developers through SourceForge directory and Enterprise Directory.[15][16] Given that many open-source projects fail due to lack of developer support, exposure to such a large community of developers can continually breathe new life into a project.

Revenue model

SourceForge's traditional revenue model is through advertising banner sales on their site. In 2006 SourceForge Inc. reported quarterly takings of US$6.5 million.[17] In 2009 SourceForge reported a gross quarterly income of US$23 million through media and e-commerce streams.[18] In 2011 a revenue of US$20 million was reported for the combined value of the SourceForge, slashdot and freecode holdings, prior to SourceForge's acquisition.[19]

Since 2013 additional revenue generation schemes, such as bundleware models,[20] have been trialled, with the goal of increasing SourceForge's revenue. The result has in some cases been the appearance of malware bundled with SourceForge downloads.[21] On February 9, 2016, SourceForge announced they had eliminated their DevShare program practice of bundling installers with project downloads.[22]

History

SourceForge, founded in 1999 by VA Software, was the first provider of a centralized location for free and open-source software developers to control and manage software development and offering this service without charge.[6] The software running the SourceForge site was released as free software in January 2000[23][24] and was later named SourceForge Alexandria.[25] The last release under a free license was made in November 2001;[26] after the dot-com bubble, SourceForge was later powered by the proprietary SourceForge Enterprise Edition, a separate product re-written in Java[27][28] which was marketed for offshore outsourcing.[29]

SourceForge has been temporarily banned in China three times: in September 2002[30], in July 2008 (for about a month)[31][32] and on August 6, 2012 (for several days).

In November 2008, SourceForge was sued by the French collection society Société civile des Producteurs de Phonogrammes en France (SPPF) for hosting downloads of the file sharing application Shareaza.[33]

In 2009 SourceForge announced a new site platform known as Allura, which would be an extensible, open source platform licensed under the Apache License, utilizing components such as Python and MongoDB, and offering REST APIs.[34] In June 2012 the Allura project was donated to the Apache Software Foundation as Apache Allura.[35][36]

In September 2012 SourceForge, Slashdot, and Freecode were acquired from Geeknet by the online job site Dice.com for $20 million, and incorporated into a subsidiary known as Slashdot Media.[37][38] In July 2015 Dice announced that it planned to sell SourceForge and Slashdot,[39] and in January 2016 the two sites were sold to the San Diego-based BIZX, LLC for an undisclosed amount.[40]. In December 2019, BIZX rebranded as Slashdot Media.[41]

On September 26, 2012, it was reported that attackers had compromised a SourceForge mirror, and modified a download of phpMyAdmin to add security exploits.[42]

Controversies

Some of SourceForge's monetization practices have been met with criticism by developers and end users.

DevShare adware
Number of hosted projects, 2000-2010

In July 2013 SourceForge announced that it would provide project owners with an optional feature called DevShare, which places closed-source ad-supported content into the binary installers and gives the project part of the ad revenue.[43] Opinions of this new feature varied; some complained about users not being as aware of what they are getting or being able to trust the downloaded content, whereas others saw it as a reasonably harmless option that keeps individual projects and users in control.[44]

In November 2013 GIMP, a free image manipulation program, removed its download from SourceForge, citing misleading download buttons that potentially confuse customers, as well as SourceForge's own Windows installer, which bundles potentially unwanted programs. In a statement, GIMP called SourceForge a once "useful and trustworthy place to develop and host FLOSS applications" that now faces "a problem with the ads they allow on their sites ..."[45][46][47]

In response to the DevShare adware many users and projects migrated to GitHub, other software hosting facilities, or self-host their software.[48][49] In May 2015, SourceForge took control of pages for five projects that had migrated to other hosting sites and replaced the project downloads with adware-laden downloads.[50] Community concerns triggered a prompt review of SourceForge mirroring program, and third-party bundling of mirrored content was discontinued on May 27, 2015.[50]

After SourceForge was sold to BizX in 2016, DevShare was discontinued.[51][52] On May 17, 2016, SourceForge announced that they were now scanning all projects for malware, and displaying warnings on projects detected to have malware.[53]

Project hijackings and bundled malware

GIMP, who discontinued their use of SourceForge as a download mirror in November 2013,[45][54] reported in May 2015 that SourceForge was hosting versions of their Windows binaries that "put other software apart from GIMP on our users' systems" on their Open Source Mirror directory,[55][56] which SourceForge claims is a collection of abandoned projects.[57][58] This came despite SourceForge's commitment in November 2013 to never bundle adware with project downloads without developers' consent.[54][55][59] GIMP said "To us, this firmly places SourceForge among the dodgy crowd of download sites."

On June 1, 2015, SourceForge claimed that they stopped coupling "third party offers" with unmaintained SourceForge projects.[60] Since this announcement was made, a number of other developers have reported that their SourceForge projects had been taken over by SourceForge staff accounts (but have not had binaries edited), including nmap,[59][61] and VLC media player.[62] On June 18, 2015, SourceForge announced that SourceForge-maintained mirrored projects were removed, and anticipated the formation of a Community Panel to review their mirroring practices.[63] However, no such Community Panel ever materialized.

Project of the Month

Since 2002, SourceForge has featured a Project of the Month.[64]

2018 SQuirreL SQL Client, Hibernate, iDempiere, Xtreme Download Manager, Linux Lite, Zabbix, GnuCash, Eclipse Tomcat Plugin, fre:ac, Firebird
2017 Bodhi Linux, antiX-Linux, Maxima, DC++, NAS4Free, Outlook CalDav Synchronizer, Liferay Portal, Bulk Crap Uninstaller, Free Pascal Compiler, SMPlayer, ShanaEncoder, fldigi, FreeType, winPenPack, Lazarus IDE, IssabelPBX, FlightGear, gnuplot, x64dbg, Octave-Forge, Pandora FMS, Manjaro Linux, MPC-BE
2016 Ditto, Double Commander, ProjectLibre, SMPlayer, WinPython, Sparkylinux, SharpDevelop, Wine, ArchBang, Libjpeg-turbo, Pandora FMS, MovistarTV Kodi addon, MediaPortal, iDempiere, LibreCAD, Eclipse Tomcat Plugin, FreeDOS, GnuCash, Nagios Core, SQuirreL SQL Client, Freeplane, TYPO3, ReactOS, Tcl
2015 Simutrans, GnuCash, ClamAV, ScummVM, Octave-Forge, TortoiseSVN, JasperReports Server, NAS4Free, gnuplot, PSeInt, TeXstudio, fre:ac, Maxima, FlightGear, rEFInd, FreeType
2014 SCons, MPC-HC, PortableApps, OpenMediaVault, VASSAL Engine, eXo Platform, Freeplane, Cmdbuild, ApexDC, Free Pascal Compiler, Universal Media Server, Clover EFI bootloader, Minsky
2013 cpuminer, Password Safe, BleachBit, West Point Bridge Designer and Contest, TeXstudio, winPenPack, ReactOS, FileBot, SuperTuxKart, PostBooks, Kiwix, DOSBox
2012 JStock, Rigs of Rods, ProjectLibre, PeaZip, XOOPS, Liferay Portal, 0 A.D., Luminance HDR, Elastix, Scribus, Boost, HyperSQL
2011 TICO, The Number Race, GCompris, iTALC, Moodle, Tux Paint, OpenPetra, odt2braille, NVDA, eGuideDog, CiviCRM
2010 Snort, Gutenprint, jEdit, Ghostscript, Wireshark, Scintilla, OpenNMS, LAME, Mantis, Arianne, Notepad++, Clonezilla
2009 OpenGTS, Mumble, Sweet Home 3D, Medical, eyeOS, Piwik, Silex, DOSBox, dotProject, Frets on Fire, ZK, TinyMCE
2008 OrangeHRM, shareaza, concrete5, WinSCP, Enomalism, Kablink, PowerFolder, MindTouch, ehcache, Hyperic HQ Enterprise Monitoring
2007 Firebird, Barcode4J, Openbravo, Inkscape, Scorched 3D, Art of Illusion, FreeCol, FreeNAS
2006 Rosegarden, Pentaho, Linux NTFS file system support, openQRM, Sahana disaster management system, Stellarium, Filesystem in Userspace, CMU Sphinx, FreeMind, Nullsoft Scriptable Install System
2005 FCKeditor, NHibernate, MediaWiki, MinGW, Gourmet, JasperReports, Nagios, Robosapien Dance Machine, net-snmp, OGRE, ClamWin, RSSOwl
2004 TortoiseCVS, PearPC, SugarCRM, Azureus, Bochs, Audacity, AWStats, eGroupWare, BZFlag, Mailman, Compiere, phpBB
2003 PhpGedView, FileZilla, Gallery, TightVNC, Boa Constructor, Tikiwiki, MegaMek, POPFile, JBoss, TUTOS, Crystal Space, SquirrelMail
2002 phpMyAdmin, Fink, Gaim

Reception
An error message seen by someone attempting to access SourceForge from Iran, an ITAR-restricted country

Usage

As of May 2013, the SourceForge repository hosted more than 300,000 projects and had more than 3 million registered users,[65] although not all were active. The domain sourceforge.net attracted at least 33 million visitors by August 2009 according to a Compete.com survey.[8]

Country restrictions

In its terms of use,[66] SourceForge states that its services are not available to users in countries on the sanction list of the U.S. Office of Foreign Assets Control (including Cuba, Iran, North Korea, Sudan and Syria). Since 2008 the secure server used for making contributions to the site has blocked access from those countries. As of January 2010, the site had blocked all access from those countries, including downloads. Any IP address that appeared to belong to one of those countries could not use the site.[67] A month later SourceForge relaxed the restrictions so that individual projects could indicate whether or not SourceForge should block their software from download to those countries.[68]

Crimea has been blocked since 1 February 2015.[69][70][71]

See also
  • Comparison of source code hosting facilities

References
  1. "Slashdot Media to Merge with BIZX, LLC, Creating a Market Leader in B2B, Software, Technology, and Data". BusinessInsider.com. Retrieved 2020-01-12.
  2. "BIZX Subsidiary SourceForge Media, LLC Acquires Slashdot Media". Marketwire. 2016-01-28. Retrieved 2016-10-15.
  3. "BIZX Subsidiary SourceForge Media, LLC Acquires Slashdot Media". Marketwire. 2016-01-28. Retrieved 2017-01-10.
  4. Abbott, Logan. "SourceForge Acquisition and Future Plans". SourceForge. Retrieved 1 January 2017.
  5. "Sourceforge.net Traffic, Demographics and Competitors". Alexa.com. Retrieved 4 February 2019.
  6. Maguire, James (17 October 2007). "The SourceForge Story". Archived from the original on 16 July 2011. Retrieved 12 April 2012.
  7. "About". Retrieved 2014-03-03.
  8. United States (2011-10-26). "Sourceforge Attracts Almost 40m Visitors Yearly". SiteAnalytics.Compete.com. Retrieved 2012-04-19.
  9. Roberto Galoppini (1 July 2013). "Today We Offer DevShare (Beta), A Sustainable Way To Fund Open Source Software".
  10. Roberto Galoppini (7 February 2014). "DevShare Relaunch: Power to end-users!".
  11. Abbott, Logan. "SourceForge Acquisition and Future Plans". SourceForge. Retrieved 10 February 2016.
  12. "SourceForge now scans all projects for malware and displays warnings on downloads". SourceForge. 2016-05-17. Retrieved 2016-10-15.
  13. "Sourceforge.net". Apps.SourceForge.net. Retrieved 2012-04-19.
  14. "Comprehensive Service Directory". Apps.SourceForge.net. Retrieved 2012-10-19.
  15. "SourceForge.net".
  16. "SourceForge.net".
  17. Hunt, Katherine (2007-05-24). "Sourceforge quarterly profit surges as revenue rises". MarketWatch.com. Retrieved 2013-08-13. Software Corp., late Thursday reported third-quarter net earnings of $6.49 million, or 9 cents a share, up from $997,000, or 2 cents a share, during the year-ago period. Pro forma earnings from continuing operations were $2.1 million, or 3 cents a share, compared with $1.2 million, or 2 cents a share, last year. The Fremont, Calif.-based maker of computer servers and storage systems said revenue for the three months ended April 30 rose to $10.3 million from $7.9 million. Analysts, on average, had forecast a per-share profit of 2 cents on revenue of $12 million.
  18. "SourceForge Reports Second Quarter Fiscal 2009 Financial Results". Archived from the original on 2015-06-03.
  19. "Dice holdings bytes slashdot".
  20. "Today we offer devshare beta, a sustainable way to fund open source software".
  21. Schofield, Jack (29 January 2015). "Are there any trustworthy sources for downloading software?". The Guardian. Retrieved 11 May 2015.
  22. "SourceForge pledges to clean up its downloader act". BetaNews. Retrieved 30 April 2016.
  23. "SourceForge Code Release". VA Software. 2000-01-14. Archived from the original on 2000-03-01. Retrieved 2017-02-11. It's finally here...The Code behind this site is being released under the terms of the GPL.
  24. "SourceForge - Files". Archived from the original on 2001-04-18. Retrieved 2017-02-11. Early code releases
  25. "SourceForge Alexandria". Archived from the original on 2002-03-02. Retrieved 2017-02-11.
  26. "Restarting free SourceForge development". LWN.net. 2002-12-11.
  27. Rick Moen. "Sourceforge forks". Retrieved 2017-02-11. ...around 2002, VA Software decided to junk the entire SourceForge codebase ... as the basis for its proprietary SourceForge Enterprise product, and recode the entire thing from scratch in Java...
  28. VA Software. "Differences Between SourceForge.net® and SourceForge® Enterprise Edition". Archived from the original on 2007-03-10. Retrieved 2017-02-11. SourceForge.net was built ... using popular web scripting languages including PHP, Perl and Python and many Open Source tools and components. ... By contrast, SourceForge Enterprise Edition was architected and built from the ground up ... [with a] Platform-independent J2EE architecture
  29. Business Wire (2003-12-08). "Latest Product from VA Software Provides Better Governance for Offshore Outsourcing". Retrieved 2017-02-11. VA Software Corporation (Nasdaq:LNUX), provider of SourceForge Enterprise Edition ... today announced the release of a product designed to address key challenges related to offshore application development. SourceForge Enterprise Edition 3.5...
  30. "China Says Asta la Vista to Altavista". VNUNet.com. 2002-09-06. Archived from the original on 2008-10-11. Retrieved 2007-12-04.
  31. SourceForge Unblocked in China. Moonlight Blog. July 24, 2008.
  32. "Gamedev.net". GameDev.net. 2012-04-14. Retrieved 2012-04-19.
  33. "Record Labels to Sue Vuze, Limewire and SourceForge". TorrentFreak.com. Retrieved 2012-04-19.
  34. "An Open Forge". SourceForge. Retrieved 4 February 2016.
  35. Proffitt, Brian (2012-06-18). "SourceForge back-end code to be donated to Apache". ITworld. Retrieved 2012-10-19.
  36. "SourceForge submits Allura to Apache's Incubator". H-Online.com. 2012-06-19. Archived from the original on 6 October 2013. Retrieved 2012-10-19.
  37. "DHI Group Inc. - Dice Holdings, Inc. Acquires Online Media Business from Geeknet, Inc". Retrieved 30 April 2016.
  38. "Dice Holdings acquires Slashdot and SourceForge". 19 September 2012. Archived from the original on 8 December 2013. Retrieved 30 April 2016.
  39. "DHI Group plans to sell off Slashdot and SourceForge". Ars Technica. Retrieved 2016-02-04.
  40. "Slashdot Media Acquired by BIZX for Undisclosed Price". San Diego Business Journal. Retrieved 2016-02-04.
  41. "Slashdot Media to Merge with BIZX, LLC, Creating a Market Leader in B2B, Software, Technology, and Data". BusinessInsider.com. Retrieved 2020-01-12.
  42. Lucian Constantin (26 September 2012). "Compromised SourceForge mirror distributes backdoored phpMyAdmin package". ITWorld.com. Retrieved 2013-01-23.
  43. Today We Offer DevShare (Beta), A Sustainable Way To Fund Open Source Software | SourceForge Community Blog. Sourceforge.net (2013-07-01). Retrieved on 2013-09-18.
  44. Nathan Willis (21 August 2013). "SourceForge offering "side-loading" installers". LWN.net. Retrieved 2013-09-18.
  45. Sharwood, Simon (November 8, 2013). "GIMP flees SourceForge over dodgy ads and installer". The Register. Retrieved November 21, 2013.
  46. "GIMP Project's Official Statement on SourceForge's Actions". GIMP.org. Retrieved 2015-11-23.
  47. "SourceForge, What the...?". GIMP.org. Retrieved 2015-11-23.
  48. O'Grady, Stephen (June 2, 2011). "What Black Duck Can Tell Us About GitHub, Language Fragmentation and More". RedMonk - tecosystems.
  49. Binstock, Andrew (December 9, 2014). "The Long Death of Project Hosting Sites". Dr. Dobb's.
  50. "SourceForge grabs GIMP for Windows' account, wraps installer in bundle-pushing adware [Updated]". Retrieved 2015-05-30.
  51. "SourceForge Acquisition and Future Plans". SourceForge.net. 2016-02-09. Retrieved 2016-10-15.
  52. "New SourceForge owners kill contentious DevShare bloatware program". PCWorld. 2016-02-12. Retrieved 2016-10-15.
  53. "SourceForge now scans all projects for malware and displays warnings on downloads". SourceForge.net. 2016-05-17. Retrieved 2016-10-15.
  54. "GIMP-Win project wasn't hijacked, just abandoned". Archived from the original on 29 May 2015. Retrieved 30 April 2016.
  55. "[Gimp-developer] GIMP project's official statement on SourceForge's actions". Retrieved 30 April 2016.
  56. "SourceForge grabs GIMP for Windows' account, wraps installer in bundle-pushing adware [Updated]". Ars Technica. Retrieved 30 April 2016.
  57. "SourceForge Open Source Mirror Directory". Retrieved 30 April 2016.
  58. "SourceForge locked in projects of fleeing users, cashed in on malvertising". Ars Technica. Retrieved 2 June 2015.
  59. "Sourceforge Hijacks the Nmap Sourceforge Account". Seclists.org. 3 June 2015.
  60. "Third party offers will be presented with Opt-In projects only". Retrieved 30 April 2016.
  61. Sean Gallagher (4 June 2015). "Black "mirror": SourceForge has now seized Nmap audit tool project". Ars Technica.
  62. "What happened to Sourceforge?". Retrieved 30 April 2016.
  63. "Project mirroring policies will be revisited with our Community Panel, existing mirrors removed". Retrieved 30 April 2016.
  64. Project of the Month | SourceForge Community Blog. Retrieved on 2014-01-04.
  65. "What is SourceForge.net?". Retrieved 2013-05-28.
  66. "terms of use". Slashdot Media. Retrieved 2013-07-28.
  67. "Sourceforge blog clarification for denial of access". SourceForge.net. Retrieved 2012-04-19.
  68. "Some good news: SourceForge removes blanket blocking". SourceForge.net. Retrieved 2014-02-07.
  69. "SourceForge заблокировал скачивание файлов для крымских ip-адресов".
  70. "SourceForge заблокировал скачивание файлов для крымских ip-адресов".
  71. "SourceForge.net заблокирован на территории Крыма".
This article is issued from Wikipedia. The text is licensed under Creative Commons - Attribution - Sharealike. Additional terms may apply for the media files.