Ok, I've created a new project site at SourceForge.net which you can find here. Everytime I try to figure out the CVS stuff I end up feeling dumb because I can't figure it out. So hopefully I'll “get it” this weekend so that I can put some files up there. For now the project site is just an empty shell.
In the meantime I would really like to figure out this reported bug about a security issue with the web parts. I'm not really sure if I understand what the problem is but I don't think it is really an issue with the web parts but rather a configuration issue.
The reason I think it is a configuration issue is because the main web part (the report viewer) is basically just an iframe that loads a report services report. The machine that I test my web parts on is a different machine than the reporting services server so that shouldn't be an issue. I'm just wondering if the problem is that the user viewing the web parts doesn't have access to the reporting server. But I don't really know so let's talk more about this problem either here in the comments or in the forms.
While we're at it, please post any other bugs you've run into at the project site.