hypejunction/elgg_tokeninput

Registry deprecationdanger

Packagist marks the entire package as abandoned with no replacement named, creating a significant dependency and maintenance risk despite recent repository activity.

Security policycaution

The repository publishes no security policy, leaving vulnerability reporting and response expectations unclear.

Workflow auditcaution

Both workflows were analyzed without failures and have no untrusted checkout or script-injection findings, but all 11 action references are unpinned, leaving build inputs exposed to moving changes.