- hunspell (one of the major spell-check engines, used by Firefox, LibreOffice, et cetera)

- Mesa3d

- Many Linux-kernel utilities (e2fsprogs, procps-ng (ps, top, uptime, watch, ...), fuse, jfs, sysfsutil, net-tools, NFS, acpiclient/acpid, et cetera)

- PCRE

- Flex (the lexical analyzer generator)

- TCL (the language)

- Many lower-level media libraries (freetype, liba52, libmpeg2, libmtp, libwpd, libpwg, opencore-amr, giflib, libcddb, libebook, libexif, et cetera)

A lot of what you've listed either ships along with other software as libraries on platforms like Windows and Mac and/or ship as part of linux distos. Hence SF would not benefit spending time infecting these and as a consequence, the owners have little reason to move away from SF.

That is absolutely true, I had the same thought. I should add that my list was biased away from Windows applications, as I made the list by summarizing the output of:

    pacman -Qi|grep ^URL|grep -i -e '\bsf\.net' -e sourceforge|sort -u

Besides Notepad++, I have in this box Pidgin, KeePass, DjVuLibre/WinDjView, DOSBox, Freeplane, TeXnicCenter, NAPS2, WikidPad, WinMerge, REDUCE (great CAS), JaxoDraw, MinGW/MSYS, NumPy/SciPy (Windows binaries are there...) and quite a few more.

I don't think REDUCE and JaxoDraw are going anywhere soon. Same for the WP 31S/34S calculator projects. Maxima and matplotlib are there as well.

I really need some of these, so for me blocking SourceForge is not an option even at this moment. It just isn't as easy as the vibe here makes it. I'm just as careful as you should when downloading Windows installers. Block most of the JS there, scan the files, always go for custom setups and when in doubt use sandboxing.

mingw, mingw-w64, and msys2 are still there. Kind of a big deal because their package managers use SF mirrors.

MSYS2 packages are signed by Alexey Pavlov. Pacman won't install unsigned ones by default.