There should be a thread with these modules listed, so that people don't install them...
That's where I would use SpreadXOOPS for too: it would contain info about how you would set up a XOOPS site, an up-to-date module list (with only the latest modules that don't have leaks), and things like that... XOOPS needs that!