According to the report made by theymos post the 2013 hack, SMF 1.x prohibits the publishing of the source code. So it looks like this is not going to be an option. (in addition to the reasons I mentioned previously)