Badges update automatically and link to the mod page on MineUniverse.
The mod is Apache2 licence, so this is fine.
The main concern has been confirmed removed, and I built the jar myself.