Bugs and vulnerabilities are roughly linear to lines of code in a project.