This is the best source I've ever run into myself: https://web.archive.org/web/20130629005257/http://namcookanalytics.com/evaluating-ten-software-development-me

This is the best source I've ever run into myself: https://web.archive.org/web/20130629005257/http://namcookanalytics.com/evaluating-ten-software-development-methodologies/ https://web.archive.org/web/20130629005257/http://namcookana... It acknowledges all the assumptions it makes, but we can all find problems with each and every approach to this. Generally, looking for incident rates measures may give out some more papers on the same note.