45 days is a pretty reasonable and standard amount of time to give them after you attempted to notify them:

https://www.cert.org/vulnerability-analysis/vul-disclosure.c...

You might give them that amount of time, inform them you're going to disclose, and if they're still unresponsive, you did your due diligence trying to disclose responsibly and I think it's ok for you to publish.