Case study: building a SDL metrics program