Here's a bunch of trivial patches switching a few packages to
mirror://sourceforge URIs (and one adding a comment explaining why not).

I tested that they all work and produce the same hash.  Will push
shortly if nobody objects.