SourceForge site maintenance window on 2013-11-07

A maintenance window has been scheduled for 13:00-14:00 UTC 2013-11-07. A short period of SourceForge site downtime is expected during that time.

Regards,
Chris Tsai, SourceForge.net Support

API Improvements: Bearer Tokens & Project Admin

Today we have launched some improvements to the API to allow you to more easily have programmatic access to your project data.  Bearer tokens are an extension to the existing OAuth negotiation that makes it vastly easier for your program to access the API.  Additionally, the API can now be used with the project data export launched in September to easily make regular backups of your project’s data, as well as now being able to install new tools for a project programmatically.

Bearer Tokens

token

On the OAuth tab under your Account settings, you can now generate a bearer token for any registered OAuth application.  These tokens are pre-negotiated, so your application doesn’t need to deal with the multi-step OAuth verification process and can just include the token in the access_token parameter to any HTTPS GET or POST request to the API.  Note: because these tokens grant all of the access rights of your account, you should protect them carefully and revoke any that you are no longer using.  More information on using bearer tokens, including example code, is available on the wiki.

Project Admin API

The project data export feature can now be accessed via the API, so you can schedule a project export, check the export’s status, and download the exported data, all programmatically.  There is even a drop-in script ready to do all of these steps for you.

Additionally, you can now install new tools, such as new repositories or ticket trackers, into your project via the API.  More information is available on the wiki.

Updates About SourceForge’s Research Projects: MARKOS

Sub-Carousel_720x315px_0SourceForge is excited to announce that at the upcoming ICT 2013 Conference – to be held next week in Vilnius (Lithuania) – there will be a presentation of an alpha version of the MARKOS system, an open source solution to search and analyze open source software (Booth: 4A10).

If you’re in the area during that time, you might want to check it out. Also if you wish to know more about the MARKOS project you can learn more about it by reading the MARKOS newsletter.

Open Source Security

Hi folks,

I found this the following article from PCWorld online regarding security vulnerabilities in Open Source projects. I strongly commend this to you all for your own information and the protection of your projects and users.

Note that all projects mentioned from SourceForge in that article were contacted by the researcher who found the issues and also engaged CERT/CC from Carnegie Mellon University. I also directly reached out to them this morning.

Best regards,

Daniel Hinojosa – SourceForge Community Manager

Planned downtime for CVS on 2013-10-28

Greetings,

On Monday, 2013-10-28, from 16:00 – 17:00 UTC we will be performing maintenance on the CVS server for developer access. Anonymous CVS access should be unaffected.

UPDATE: we ran into some issues and this took longer than expected, but this maintenance is now complete.

Regards,
Chris Tsai, SourceForge.net Support