I try to, unfortunately security is typically the hardest to measure. If the projects documentation specifies security as a goal of the project, I always look

I try to, unfortunately security is typically the hardest to measure. If the projects documentation specifies security as a goal of the project, I always look at that kindly, but most projects don't list that as a major goal.