This is something legislation could fix. Harvesting emails for spamming from GitHub commits is not much different from taking parked cars for a joyride: they might be in the open, but not for you.