Lambda the Ultimate

Hi,

At times there is need to evaluate code quality. Usually this is to assess overall performance of IT unit or put subjective value on the codebase, or to make a scrap or keep decision. This means that definition of quality is very broad - includes security, code re-use, fitness for purpose, etc.

What standards or guidelines could be applied to move from subjective to objective metrics? What subjective metrics are the important ones?

Standards wise I could only come up with OWASP Code Review Guide for webapp security, ISO 12207 for development process.
Your thougts?