> What would you have them publish instead?

Is there any duty to publish anything? They could release nothing, or nothing with any details, if they have some obligation.

Yes, but Sparkfun didn't "release nothing", and now they are opening themselves up to a libel suit.

It would have been far better had they not published anything at this point.