Just to comment for anyone downloading the releases and scratching their heads when cloneLib times out, the latest zipped/gzipped release (1.0.15) does not include the updated more secure approach to downloading repos when using cloneLib to get libStatGen. (as mentioned here #67 ) Looks like the fix was pushed, but never zipped in.
A quick edit of Makfile.inc and replace git:// with https:// does it (or pull the master branch)