Is it ethical or legal for companies to scrape GitHub stars for spam purposes?

Just got an email from jack.flynn@gatsbyjs.com with some spam and he mentioned that he got my information from the stargazers list of the Gatsby repo.

Is this something I should bother reporting to GitHub? I will likely never star another repo again because it's been proven to be a good source of spam.

I have started thousands of repos only a handful have ever reached out directly. I get more spam from people finding my repos and trying to sell me something. So I wouldn't write off stars yet, though given the GitHub timeline "spam" from staring repos...

YMMV