The developer’s boss(es) seems more useful in this case. Unless a single developer was grossly negligent, then throw them in there too, but even then their supervisors are on the hook for signing off on grossly negligent software.