If you find a security problem, please report it privately through GitHub's Report a vulnerability option on the Security tab, rather than opening a public issue. You can expect an acknowledgement within a week.
GoDark uses private macOS APIs and runs sandboxed with the hardened runtime. It doesn't use the network or collect any data.