I do not recommend playing those old versions on public open servers, you can still safely play in single player. The vulnerability was fixed in BDLib but there are many other mods that are still vulnerable out there as well.
The mod is licensed under the MIT License, the source code is available on GitHub. Yes this means you have permission to add it to any public or private mod pack.