Please don't open a public issue for security problems. Report them privately via GitHub's private vulnerability reporting instead.
Include what you found, how to reproduce it, and the affected package and version. You should get a response within a week.
goopUI is pre-alpha. Only the latest release (or main, before the first release) receives fixes.