Considering the number of projects hosted on sourceforge, and their wide distribution, I really hope that people can verify the integrety of their projects (source). It'd be pretty terrible if any of the sourceforge hosted projects had small trojans installed in them. Mathew Johnston