All findings (and more) have been addressed by upstream: https://github.com/mikebrady/nqptp/releases/tag/1.2.4