public comment period for oisafety.org's vulnerability process