Not everyone will share the code to their smart contract, although it's an established practice as it shows transparency and makes people with some technical skills more willing to invest as they can make sure the code is not flawed or the developers deviced a way to make a run with the funds.
Having said that, using the ICO you asked about as reference, here's the steps I took to find the deployed contract:
1- Google "Herocoin github". The first result is the Github repository for HeroCoin and their ICO.
2- You can see that they added a message to their latest commit mentioning the address which the crowdsale contract was deployed to, which is: 0xe477292f1b3268687a29376116b0ed27a9c76170
3- Go to https://etherscan.io which allows you to search txs, addresses, tokens, etc.
4- Search the contract address and you will see all the details for the contract. ETH Balance, transactions, associated token, etc.
5- There's a tab called "Contract Source" where you will be able to see the deployed and verified code.
Again, they are not obliged to verify the code and the tokens you are looking for might not have it. It would surely raise a red flag as no one would be able to verify it's not a scam.