Thank you for your review! And yes, abuse will be the biggest concern if I can manage to reach a larger audience. In the end there might not be a 100 % secure way but the point is to make abuse so hard that it's just not worth the effort. And also "human touch" can be implemented but not in a way that it disturbs the user experience in any way. There can be blacklists for users and repos. There can be a flagging system. Whatever. It's just the start. Well, we will see where it goes.