Lately, when I look at projects, I tend to check GitHub and audit reports first.

It's not pretending to understand, I just want to figure out "how they actually modify the code."
What do I look for on GitHub?
Don't focus too much on update frequency, check if there are explanations for key changes, and see if anyone reports security issues in the issues and if they are taken seriously.
For audit reports, don't just look at the cover logo; search directly for "critical/high," then see if they fixed the issues and how they fixed them.
If they drag their feet, I put it aside for now.
Upgrading multi-signature is also very important, basically who can control the protocol:
How many people sign, whether the signers are decentralized, whether there's a timelock (giving you reaction time).
These are more meaningful than just "the community is lively."

Recently, hardware wallets are out of stock, phishing links are everywhere, so now when I see airdrops or whitelists, I instinctively step back first...
Anyway, double-check addresses twice, don’t find it troublesome.

I trust data a little more; intuition can easily be swayed by the atmosphere, but data at least helps review where I went wrong.
That’s all for now.