Does spam costing more money stop spam? Does it cost money per account, project, version? If I can make $100 from one victim, is this spam still profitable?
What happens to the international developers who cannot easily get a payment method setup?
Does a $10/m "identity verification" stop a nation state from using the platform to influence?
Fair argument. The spam fee should be proportional to the amount of spam rather than account or fixed monthly fee. Some kind of micropayment per spam item. Per repo, or per commit / per release in case of NPM?
Micropayments on internet have always proven difficult to implement. No silver bullets.