The sources are signed with Thomas´ GPG key.
Please see the the
for current and past downloads including release notes etc. Sourceforge is providing a number of download mirrors to ensure the best availability. Please let´s use this kind service.
You Windows folks are lucky since version 1.6.0: Patrick joined the team as a Windows developer and is providing binaries regulary, see download/win32/! Also, JonY chipped in with cross-compiling builds for 64bit Windows, to be found in download/win64/. The latter files are signed with JonY's GPG key.
Development happens in the subversion repository on orgis.org:
You can also browse it via the ViewVC web interface. You can get snapshots from both places.
A nightly tarball with the the autotool stuff prepared is at http://mpg123.org/mpg123-svn-snapshot.tar.bz2.
Old downloads as well as gzipped variants of the bzipped tarballs are to be found either on the sourceforge.net files section or in the local download directory.
The old mpg123 versions contain various problems including security vulnerabilities.
That doesn't mean that mpg123 is insecure and bad, this is just a result of aging code that lacks active maintainership.
So please use these downloads with care and check the news section for known issues.