I think your are right. But oxo is not my project. I am recently curious about vuln and related tools ( I want to add some opensource vuln tools in my project ). I found oxo and share it in hackernews.

I am developing x-cmd in recently three years. And this is the demo of using google's OSV scanner in x-cmd: https://www.x-cmd.com/mod/osv

Welcome to our website.

To be honeset, I'm a bit stuck on how to approach the project promotion. While your advice is tailored for oxo, I'd still like to consider it and see if any aspects could be applicable to my situation.