I have updated everything to use D7 APIs and conventions throughout. It's tested and works on a development server. However, it should be noted that at least on XAMPP for Windows the Apache server does not populate the $_GET array with the parameters when clean urls are used. So /node/1/¶m=hello will not get tokenized correctly. It works fine though if you don't pass clean urls. In the example given /index.php?q=node/1¶m=hello will work correctly. I will add a note to this effect on the documentation page.
After a year in beta release with 57 reported users and no issues in the queue it seems reasonable to assume this module is stable and free from any observed security vulnerabilities. Thus, I am releasing it as stable version 1.0.