As we got a spam storm from GitHub (a gitea hater, more than a spammer) I tought to notify you about the fact: delegating authentication to GitHub does not really prevent spam... More detail: the abuser registered a few fake accounts and edited existing tickets and added more tickets, resulting in many abusing email notifications. --strk;