Moving the source control to Git would have a knock-on benefit of providing secure anonymous access to the repositories.
We're trying to fix all unauthenticated packages in MELPA and the ones in goodies-el are some of the most popular remaining (https://github.com/melpa/melpa/issues/3004 for more details). Anonymous CVS access doesn't offer any guarantee against MITM attacks for people checking out the code, but switching to Git would enable anonymous access via HTTPS. This is not a concern for people using these packages in Debian, but it would be great for people like me who sometimes edit Debian packaging files on non-Debian systems. (I think this would also be true of switching to Subversion, as SVN can also work over HTTPS, but I'm not sure what services Alioth offers for each VCS.)
