isitreallyfoss.com did a break down on typst that goes more in-depth

https://isitreallyfoss.com/projects/typst/

It seems mostly fine except for this bit:

> The compiler includes a package manager “Typst Universe” that may connect to servers owned and operated by Typst GmbH