Require the php module for the php eval, use php_eval from php.module

Same needs to be done in 8.x-1.x-dev as it seems, where the php module is contrib. See src/AutoUsernameUtilities.php
Setting this to a major task for security relevancy.

Adding a tag as well.

All the releases for the PHP module are marked insecure → . Does make any sense to have that module as dependency?

Thanks @apaderno, good question. I'm afraid the

eval()

directly inside the code of this module is even worse? Any other ideas or should we just leave it as-is?

btw. I found it here: https://git.drupalcode.org/project/auto_username/-/merge_requests/5/diff...
Please also have a look at the suggested change.