I think there's a difference between "latest version" and "latest release". If an admin forgets to update the release pointer, I guess it's possible for that to get stale. Regardless, SF should absolutely not hijack any projects, let alone ones that have pushed new binaries in the last few months (even if they're not releases).
