Comment by cwizou

Same here, I get frequent spam on one specific (very popular) issue, and they always take care of it within an hour or two. I hide the spam myself to protect the users on the web (I can't do anything about the phishing emails though that gets sent [by default I think ?]), and their moderation wipe the spam account and sends a quick email to confirm.

Usually it's a new user who clones a few repositories to pass whatever mitigation they have.

Always get a "lots of reports, this may take a while" email first though. I don't think I ever not got that one.

I think there's something to be said about sending - by default - user generated content by email automatically if you've replied once to a thread. Lots of bad defaults here imho.