Might be worth adding that piece of information to the original article, maybe including a timeline of events.
> The developer has been given responsible disclosure and I have been informed that steps are being taken to address the security concerns.
There is still no timeline or other information about the events, which is unfortunate; I'd expect the author to document and report this in such a situation.
The job offer the author received on the other hand is… something.