Hacker News Reader

I've been doing the same over a similar time span. 5 years for me. However, i am yet to find any leaks.

I get a ton of spam, but they ALL are sent to my publicly listed email address in my git commits. I'm seriously considering turning that email into a honey pot.

The "leak" could be the company selling their email list, yes?

Or some kind of involuntarily passing on the mail addresses, like a breach of some kind.

Could be. If they sold the email addresses, that is one reason they would not "disclose" it, it was just routine business (and not business they are eager to disclose, although I suppose it's mentioned in some fine print in their privacy statement somewhere, hypothetically, maybe).

I haven’t counted, but have had a similar rate over 10 years.