They appear to have told the IRB they weren't experimenting on humans, but that doesn't make sense to me given that the reaction of the maintainers is precisely what they were looking at.

Inasmuch as the IRB marked this as "not human research" they appear to have erred.