security/wordpress/org gets a ton of spam. Many of us use Gmail, but we’ve had to disable the Gmail spam filterFilter Filters are one of the two types of Hooks https://codex.wordpress.org/Plugin_API/Hooks. They provide a way for functions to modify data of other functions. They are the counterpart to Actions. Unlike Actions, filters are meant to work in an isolated manner, and should never have side effects such as affecting global variables and output. because it was causing legitimate messages to be missed (don’t know why).
Most of the spam is really obvious… VIAGRA, foreign languages (a lot of Russian), other pharma spam.
Ultimately, I think we’d like to move away from e-mail, and have some sort of private TracTrac Trac is the place where contributors create issues for bugs or feature requests much like GitHub.https://core.trac.wordpress.org/. or ticketing system. But until then, some SpamAssassin or other measures would really help us find the wheat among the chaff.