Not necessarily. Every commit contains something that looks like an email address, but there's nothing guaranteeing that they used a real email address, let al

Not necessarily. Every commit contains something that looks like an email address, but there's nothing guaranteeing that they used a real email address, let alone one they actually check. I'd suggest that when merging a commit, checking that the email is actually valid by talking to the person concerned is probably a good idea, maybe even when they're submitting the commit through GitHub.