Do you really want someone to inject some js that says "click here to receive notifications about this project" that actually sends them spam notifications?