Thinking about design of a potential issue-tracker/code-review tool for @gothub and trying to account for the fact that allowing text to be entered into a website is becoming increasingly dangerous these days with way too much potential for spam and abuse by bots.

Currently our web UI is entirely read-only and perhaps there is value in keeping it that way?
This means communication needs to happen out of band somehow. Currently we don't offer anything. We should at least offer mailing lists to offer at least one way for projects to communicate. But mailing lists are a poor medium for keeping a structured, persistent, and searchable record of information about a software project. On the other hand letting anyone add arbitrary information is becoming a nightmare for both us as a hosting provider and our users who maintain public projects.

I end up asking myself what if the only way to have information show up on a project's main web presence was if a project maintainer pulled data from a git repository of someone who wants to report an issue or add review comments. Would that cause too much friction?