typically requiring full access to the code, using high-quality tools with reduced (or at
least quantifiable) false positive/negative rates, and significant labor. Some of these
metrics are only appropriate for assessing implementation, not design. Universal
application of these metrics to all products is impossible, and most consumers will not be