Comment by weird-eye-issue

You could use a closed source spam protection API from an open source project. Best of both worlds. Oh that is actually what Wordpress does with Akismet