> Following legal advice

It's impossible to know what this "legal advice" was, but the software project itself is probably fine. The legal risk is always going to be with the person that hosts it with the intention of facilitating the unauthorized access of Twitter's website. Seems like that could run afoul of the Computer Fraud and Abuse Act.

Those people should seek their own legal advice.

I imagine it will be hosted in jurisdictions other than the US.