The recommended download site http://jackaudio.org/downloads/ suffers
from these problems:
* It is http:// making it vulnerable to MITM attacks.
* It doesn't provide tarball fingerprints (md5 or sha256)
I recommend you discontinue it, and just use GitHub instead. A lot of
projects do this successfully. GitHub is already usable this way.