Upstream is at https://github.com/mtrojnar/osslsigncode

Search engines will display this as the first result for "osssigncode" and you claim that the sourceforge project is upstream, but https://github.com/mtrojnar/osslsigncode is. See https://sourceforge.net/p/osslsigncode/patches/10/#98d2/d522


So you could fix that link in the oneline description, maybe?