This is actually according to http://fedoraproject.org/wiki/Packaging:SourceURL#Github. The short story is that these recommendations are discussed thouroughly before adopted.

The somewhat longer story is that unless we bind the rpm version-release to a specific spotify-make git hash/tag we could generate two rpms with identical V-R with different content. In my eyes, this is unacceptable.