Or should I post his URL as a warning to others?

If the code is published on the web, it is subject to peer review.

I'd say publish the URL, but ethically, you should let him respond to your criticism, and update your comment if the referenced material changes favorably.

-- Randal L. Schwartz, Perl hacker