repeatable methods could be devised to evaluate software security.
But until such methods reach maturity and widespread acceptance,
the overall state of software security can be viewed through the
lens of public reports.