I looked up a publication using CIBERSORT to see how they got the package, and indeed they acquired it through official website application from Stanford.
Here is the publication: https://www.ncbi.nlm.nih.gov/pmc/articles/PMC5895181/
Relevant methods section:
3.1 Installation
CIBERSORT can be run online (http://cibersort.stanford.edu/) or downloaded for local use, and is freely available for academic non-profit research. R and Java implementations are available for download. While the current R script can be used to run the CIBERSORT deconvolution engine, users wishing to create a custom signature matrix will need to use the website or the Java executable.
I would agree to avoid this GitHub version, and apply through the official website application through Stanford.. if you are doing analysis for research purposes and use this GitHub version, a reviewer might be extremely skeptical.