Didn't check who filled those bugs, but I've seen companies requiring having discovered CVE to apply for some jobs, and the natural consequence is gaming the system...
Their other GitHub work is following tutorials, labs and courses.
This repository does no longer exists.