Comment by bdelay

How much notification did you give the developers before you disclosed? Did you enforce a timeline?