Observations: GPG keys check out
comparing the source zip with the SVN tag, the following items are not in the source zip: doap_log4net.rdf (DOAP file placed here for convenience) src/site/fml (empty directory) src/site/resources/js (empty directory) tests/lib/prerequisites.txt (note on prerequisites for running tests, likely dated now). None of the files would seem to interfere with building the library from the source distribution. Many if not all of the source files do not use CRLF line feeds as would be expected for a predominantly Windows oriented library. Looks like the .zip was built on a Unixy box. LICENSE and NOTICE appear fine other than displaying funny unless the application understands Unix line feeds. I'll +1 the log4net-src.zip, but would not object if anyone wants to pull it and try again. I'm moving on to check the binaries.