Much like 4th page retractions on stories in newspapers, headlines will always win out in terms of the influence on the readers.
That said, the author of KeePass responded to all the discussions here over on the project forum at SourceForge.
Since a lot of people aren't willing to even visit SF anymore, his notable responses were:
The header validation was fixed as of 2.20 in 2012
The singleton safety he was aware of, and it was only instanced prior to any threading of the application, so there could never be a thread safety issue. He has fixed this anyhow as the performance impact was minimal as of 2.30
The installers available via SF mirroring are signed by the author, so SF can not ever mess with them. They have no concerns about SF doing anything to their project.
That said, the author of KeePass responded to all the discussions here over on the project forum at SourceForge.
Since a lot of people aren't willing to even visit SF anymore, his notable responses were:
The header validation was fixed as of 2.20 in 2012
The singleton safety he was aware of, and it was only instanced prior to any threading of the application, so there could never be a thread safety issue. He has fixed this anyhow as the performance impact was minimal as of 2.30
The installers available via SF mirroring are signed by the author, so SF can not ever mess with them. They have no concerns about SF doing anything to their project.