We do maintain a separate repository, which I am working to mirror to the Source Forge repository. This has been slowed down by a plethora of security releases for our infrastructure software over the past 2 weeks.
At this point practically every release we depend on except CRE Loaded has been replaced AT LEAST once during that time and I still have one or two more to do, including one which touches the primary repository. So - yes we do, but its not going to be available until at least the end of this week.
I also need to work up documentation on what will be required to obtain developer access. Looking at the development history osCommerce and CRE Loaded, I think that it is going to be necessary to set some fairly stringent guidelines, post them publicly and enforce them ruthlessly even if it slows development.
David