This happens all the time, not really surprised as the GitHub API makes it pretty easy to extract valuable leads with real and confirmed email addresses.

I don't like this way of putting it, it's good the github API makes this easy as that makes it an useful. Should not try to imply this should be restricted just because of some bad actors. It's just going to annoy legit users and the bad ones will scrape anyway.

I'm just stating a fact, not implying anything. It's the good old saying with the sharp knife, it can be used for good and bad.

Ok sorry I guess I read too much into it.

Yea, been going on at least a decade