I was today prompted to a new download. And the link leaded to sourceforge.net as the download location instead of your official page.
SourceForge is known to alter the installer in a bad way, and adding malware. Gimp has left SourceForge because of exact this reason. SourceForge is known to mirror open source software projects without permission, and let it look like the main repository to attract users to download the altered material. My own open source project is shown as hosted there. But I have never ever created this repository. My repo is at GitHub. And I can just warn to download anything from there. And SourceForge is known to deal in a bad manner with user data.
Must I worry about the future of WinSCP when you start to cooperate with these people? Is WinSCP even still safe? Or is the installer already corrupted? I don't want to have anything to do with these bad people.