Submitting plugin caused Caddy website to start spamming my server

Hello, sorry if this isn't the correct place for this bug report, I wasn't able to find a support email for the caddy website itself.

Today I signed up at https://caddyserver.com/account and submitted my plugin suite, dev.mediocregopher.com/mediocre-caddy-plugins.git. I use this set of plugins in my personal Caddy deployment successfully, so I'm quite sure that this import path works correctly. However upon submitting it I noticed the following things:

• Bursts of requests like the following happening every 10 seconds or so:

  {"level":"info","ts":1741534109.0850415,"logger":"http.log.access","msg":"handled request","request":{"remote_ip":"X.X.X.X","remote_port":"35464","client_ip":"X.X.X.X","proto":"HTTP/2.0","method":"GET","host":"dev.mediocregopher.com","uri":"/mediocre-caddy-plugins/info/refs?service=git-upload-pack","headers":{"Pragma":["no-cache"],"User-Agent":["git/2.25.1"],"Accept":["*/*"],"Accept-Encoding":["deflate, gzip, br"],"Accept-Language":["C, *;q=0.9"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"h2","server_name":"dev.mediocregopher.com"}},"bytes_read":0,"user_id":"","duration":0.002172244,"size":366,"status":200,"resp_headers":{"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"],"Cache-Control":["no-cache, max-age=0, must-revalidate"],"Content-Type":["application/x-git-upload-pack-advertisement"],"Expires":["Fri, 01 Jan 1980 00:00:00 GMT"],"Pragma":["no-cache"]}}
  

• Various parts of the Caddy website seem to have stopped working, like the JSON Config Structure page and the Download page
• Even after temporarily blocking all requests to https://dev.mediocregopher.com/mediocre-caddy-plugins/ (all return 500 for the moment) and removing the plugin from my account the bursts of git requests have continued. Some pages, like the Download page, started working again, but others have not.

I'm wondering if something about my plugin package caused some kind of bug which the site wasn't able to gracefully recover from?

Start by reproducing a plugin submission through the account page using the repository URL and inspect the resulting Git requests and affected website pages. Trace why requests continue after the repository is blocked or removed; done means submissions stop generating uncontrolled fetches and the JSON Config and Download pages remain functional.