Sources
You can find the sources of the latest release on Alioth.
The archives are signed by one of these gpg keys:
Binary
There are binary packages of the shadow tool suite in many OpenSource distributions (Debian, Ubuntu, Gentoo, Fedora, Mandriva, and probably others).
On Debian, the shadow tool suite is distributed as two separated packages: login and passwd.
SVN
The latest sources are available from our SVN repository.
You can browse the source on the web with ViewVC.