Right now, users can totally place any Github / Discourse username, even if it already exists in the project.json file. While the first one is due to a lack of being able to "verify" the accounts without using too many resources, the second one can be mitigated by checking if this platform username already exists.