I would consider "bugs opened per month" to be a good metric, assuming someone uses the software.