metrics for: (1) rating reported software flaws as critical, high, medium,
or low severity; (2) determining whether flaw reports in general affect a
product’s market share, and if so whether reporting of low severity flaws
reduce market share less than reporting of high severity flaws; and (3)