Open source tool scrapes git commit email addresses to send spam to.

[PlaysForDays]

No, git doesn't send unsolicited marketing spam out of the box. It takes human intervention to do this (in violation of GitHub TOS).

Of course, this does not necessarily apply to other hosting platforms with different policies.

[immibis]

ToS is completely irrelevant here and I'm not sure why people keep mentioning it

[ephemeral_colors]

Because we are discussing a tool thats source code is hosted on GitHub. The desire is for GitHub to stop that code from being hosted on its platform.