Lately, when I look at projects, I start by checking GitHub first—not to pretend I understand the code… but to see if the project is "alive": commit frequency, whether there's a lot of copy-pasting, and if key changes are explained.

Coupled with the audit reports, don’t just focus on the words "audited"—the key is what scope was audited, whether high-risk issues remain unpatched, and if the fixes are followed up with subsequent commits.
Also, regarding multi-signature upgrades, even beginners can get a rough idea: whether the number of signers is sufficiently decentralized, if the threshold is too low, and whether there’s a timelock (at least giving everyone some reaction time).
Recently, Meme coins and celebrity shoutouts have been too noisy, and when attention shifts, newcomers are most likely to be pushed to take the final step…
Now I’d rather go slow and piece together these "credibility puzzle pieces" first.
What about you?