@ericlbarnes I’d put the blame squarely on @digitalocean. None of these projects consented to getting spammed with fake PRs.