Doing OSINT, you can get good insights from GitHub repositories. In addition to the code itself there are plenty of useful information in the change history, which can be of value to an attacker.
So I decided to write a small tool which uses the GitHub API to get the email addresses from commits history of user/organisation repositories.
It can be operated with or without the GitHub API token.
git clone https://github.com/vulnbe/github-osint cd github-osint python github-osint.py vulnbe
If you reach the API request limit, then you have to use API tokens.