Makes me think: Interesting spam vector: create a PR advertising whatever and then @ a bunch of people you scraped. Also interesting attack vector: get a easil

Makes me think: Interesting spam vector: create a PR advertising whatever and then @ a bunch of people you scraped. Also interesting attack vector: get a easily mistaken @ name and then see what you become reviewer on. Add malicious code to that PR and merge. Edit: also what is stupid is at work when setting up your organisation security access you can add anyone globally in the combo search. No org-only filter is even available! And of course most people use weird handles for their work or personal githubs. So using their UI you need to be an excellent human string comparator or make sure you copy and paste each persons handle which you meed to figure out for each person. Attack 3: create a bunch of accounts with a similar name to people who work at target company and hope you get added to an org’s repo by mistake.