Why would they keep it private for so long instead of reaching out to the FOSS community to help earlier?