must be lowercase and composed of URL-safe characters.
This will be public and shown on all the packages you publish. Accounts with invalid emails may be deleted without notice.