If it's NodeJS the fastest way is to check how many dependencies they have in total, bad developers will find a way to include 100s or 1000s of dependencies, anonymous third-party blobs of code running within their application:
$ npm install
Another indicator is how elaborate their build process to munge w/e they wrote into w/e a machine understands.