once it is running on OSS-Fuzz, vulnerabilities will be found automatically, and e-mails sent out automatically. it also detects if the bugs are fixed in upstream automatically