shouldiuse.io

Categories

VERDICT

SourceForge Review

Depends

Should I use SourceForge?

Compare B2B Software, Download, & Develop Open Source & Business Software - sourceforge.net

· 1 month ago

Reasonable as a secondary demand-gen directory for B2B software vendors; expect opaque pricing and lingering trust issues. Skip it for code hosting (GitHub won) or as your primary download source.

Confidence

Medium. Based on 45+ public sources across reviews, security reports, and official pages; many review snippets were truncated.

Ratings

  • Value for money
  • Ease of useNo usable evidence
  • Feature depth
  • Support qualityNo usable evidence
  • Security posture

Pricing

Free

Open source project hosting

ModelNot disclosed
Monthly feesNot disclosed
HardwareNot disclosed
Free tierYes
Business listings & demand genUndisclosed (contact sales)

Best for

  • B2B software vendors wanting extra demand-gen listings
  • Open source projects needing free download hosting
  • Buyers comparing niche business software

Not for

  • Teams needing active code hosting and collaboration
  • Buyers who vet every download and distrust ad-heavy sites
  • Vendors wanting transparent, published pricing

Gotchas - check before you buy

high

Attackers have repeatedly abused the platform to deliver malware

medium

Listings and review generation are paid; some vendors question the spend

medium

Historic adware-bundling controversy still shapes buyer distrust

low

2015 attack forced password resets for 2 million accounts

Pros and cons

Pros

  • Free hosting and downloads for open source projects
  • Large B2B software directory for comparisons and discovery
  • Vendor tools: listings, review generation, demand generation
  • Buyers can read verified end-user reviews

Cons

  • Lost code-hosting dominance to GitHub
  • Adware controversy and Slashdot Media decline damaged trust
  • Business pricing not publicly disclosed
  • Ongoing reputation questions about download safety
  • Modest 3.9/5 rating across 46 reviews

Sources & method

- 10 sources - Checkered history: 2015 breach reset 2M passwords; platform repeatedly abused as a malware delivery vector.

official x2review x4security x2news x2
  • 2015 attack, 2M password resets, Attackers compromised the platform; SourceForge reset 2 million user passwords in response.
  • Malware distribution vector, Threat actors have exploited SourceForge to deliver malware to end users.
  • Critical vulnerability (patched), Sonar researchers found a critical code vulnerability; SourceForge patched it.
  • Adware bundling controversy, Historic dev-share ad program bundled offers with installers, sparking lasting user backlash.

Key stats

  • Value for money: 2/5

    Rating

  • Free

    Starting price

  • 10

    Sources

  • Analyzed

  • Value for money: 2/5. Paid listings, undisclosed pricing; vendor ROI debated
  • Ease of use. No usable evidence
  • Feature depth: 3/5. Broad directory, reviews, ads; hosting stagnant post-GitHub
  • Support quality. No usable evidence
  • Security posture: 2/5. Breach history; repeatedly abused as malware vector
  • 3.9/5 Overall rating 46 reviews (SmartCustomer)
  • 219 G2 reviews across SourceForge's product listings
  • 1999 Founded open source hosting pioneer
  • Yes Free project hosting vendor listings and ads are paid

Pricing

Open source project hosting

Free

  • Project hosting
  • Software downloads

Business listings & demand gen

Not disclosed

  • Directory listing
  • Review generation
  • Ad placements

Security

Checkered history: 2015 breach reset 2M passwords; platform repeatedly abused as a malware delivery vector.

  • 2015 attack, 2M password resetsAttackers compromised the platform; SourceForge reset 2 million user passwords in response.⁵
  • Malware distribution vectorThreat actors have exploited SourceForge to deliver malware to end users.⁶
  • Critical vulnerability (patched)Sonar researchers found a critical code vulnerability; SourceForge patched it.⁷
  • Adware bundling controversyHistoric dev-share ad program bundled offers with installers, sparking lasting user backlash.⁸

What users say

Opinions are split: some longtime users report safe, reliable downloads while others cite the adware history and lingering trust concerns.

Full analysis

Based on 45+ public sources across reviews, security reports, and official pages; many review snippets were truncated.

Legacy directory: OK as a secondary vendor demand-gen channel; skip for code hosting or clean downloads.

Methodology

Based on 45+ public sources across reviews, security reports, and official pages; many review snippets were truncated.

Read how a report is made.

Sources

  1. SourceForge Reviews 2026 | G2g2.com
    review
  2. SourceForge Reviews — Rated 3.9/5 (46 reviews)smartcustomer.com
    review
  3. SourceForge Paid Review Site Listing — r/SaaSreddit.com
    review
  4. How GitHub replaced SourceForge — r/programmingreddit.com
    review
  5. SourceForge attacked, resets 2M passwordsthenextweb.com
    news
  6. Attackers exploit SourceForge to deliver malwarecybersecuritynews.com
    security
  7. SourceForge patches critical vulnerability | Sonarsonarsource.com
    security
  8. The SourceForge Controversy and fall of Slashdot Mediamakeuseof.com
    news
  9. SourceForge Business Software Listing Plans and Pricingsourceforge.net
    official
  10. Getting started with SourceForgedocs.sourceforge.net
    official

Add this review to your site

This check for SourceForge says Depends.

Put the badge on your site.

Visitors see the independent review.

The link points here, and search engines follow it.

This is the badge visitors see on your site.

Depends SourceForge Independent review on Should I Use It

Paste one snippet. Keep the link as it is. A nofollow tag stops search engines from following it.

Rate this review

Anonymous. You can change your vote.

Loading votes…

Comments

One queue. No nested comments. Give a display name first. Limit: 200 words per comment and 7 comments per day. You can edit or delete yours.

Save a name to write a comment.

0 / 200 words

No comments yet.