Authorities have responsibilities too

The shadow-utils project is not bound by Spanish law (or at least by this particular law), to my understanding. It's not as if CNI or the Spanish government contracted with shadow-utils to provide these features, or at least the article does not indicate such an arrangement.

It would probably be more convenient for CNI and others if they voluntarily complied, but that has to be weighed against the needs of the shadow-utils project. It seems that shadow-utils would like to avoid the outcome where CNI or someone else has to fork the software, so I imagine that there will be ongoing attempts to start a dialog. But six months, just to get an initial reply, seems a bit unreasonable to me.