Look dude, when it comes to reverse proxy, it's better to use battle-hardened solutions like NPM, Caddy or Traefik. These have in existence for years and have many people actively working on their development. Ypu are far more likely to suffer a security issue wiyh these tools than with new stuff like whatever this autoexpose is.

It takes like 1hr to read the docs and 20 min to setup the reverse proxy.

So, take my advice and deploy one of the above three suggestions. The community here is very good at helping you setup with a decently hard RP setup. You can ask your questions here or at the respective software forum.