Do you support the idea of an NMU for GPP? I'm working on it, it hasn't been updated in two years. I have an initiative to study packaging by updating packages like this. The package is orphaned, even if it hasn't been updated for that long, I will need a sponsor. If you are interested in sponsoring the upload, I would be grateful. I believe that I will be helping the project in some way. I take security very seriously. It seems to me that the problem was fixed almost 1 month ago and discussed on git.