rekt

Lack of requiring signed commits means you can get rekt. Always ensure you sign commits and set unsigned commits as unverified.

Even if your github profile does not display your email; often it can be obtained from commit information.