I also like Mercurial, and will look at the options above
>
> If you believe we shouldn't rely on third-party sites, you could setup
> Akismet
> for trac (though I am not sure how effective it is).
akismet is enabled for the site. It does a good job for content, not for
tickets. The problem is manual spam - nothing can prevent them.