I just closed a project's GitHub... It's not that I won't look anymore, but I realized that constantly focusing on commit counts can easily lead to being influenced. Now I'm more concerned with: whether there are long-term reviews, whether there are real arguments in issues, and whether bugs are genuinely fixed—those kinds of "human touch" elements are more reliable than a pretty README. I don't put much faith in audit reports either; I prefer to first look at the conclusions and whether issues are marked as "fixed/unfixed," then check if high-risk areas have actually been changed—don't get discouraged by a bunch of technical jargon right away. Upgrading multi-signature setups is even more critical; basically, who can change the rules: is the number of signers sufficiently decentralized, is there a timelock, and whether emergency pauses also require multiple signatures... these make me feel more secure than just "more on-chain profits." Recently, I’ve been comparing RWA, US bond yields, and on-chain yield products; I just see them as background noise for promotion. If I really want to handle money, I first need to understand permissions and upgrade paths clearly. Staying up late for interactions is fine, but staying up late to bear the risks—forget it.