Identify spam users
- active
- frequently has
last_sign_in_at: null
and some value inwebsite_url
- may have also have a spammy
bio
field, but tactics vary - usually they'll match via
without_projects
in the user search query, but there can be some legitimate accounts here. In the past @mfc didn't own projects but was owner of the mfc project namespace so it was accidentally nuked in a mass spam account cleanup. Also, sometimes users open issues but don't actually own projects. Those legitimate users should not be affected. - a lot of spam accounts have the same first/last name, so the name field would look like
"name": "dtytlbrneirf dtytlbrneirf"
- would be interesting if we could assign a score to users based on these heuristics
Edited by feld