the actual repos are private in a gh organisation
How do I make an issue then? Why not make an issue-only repository?
You can't create an issue. As to why it's closed source, I believe Jeffalo's answer is that it puts him under less pressure and gives him more freedom to do what he wants with it. Ifthere's a bug, you could let jeffalo know on his wall, via discord or any way you like really, and if it's a security vuln then just disclose it privately.