More than a decade ago I joined github among other systems, in order to report bugs to FOSS projects. Now I quit GitHub as it’s too risky being on there. So if a project wants bug reports, go somewhere users data is not put at risk. Or go without bug reports.