Too Long; Didn't Read
For secure code, maintainability matters for secure code. The Heartbleed Bug was a serious vulnerability in OpenSSL that allowed attackers to steal sensitive information. Experts: Bugs and Code Smells are security 'weaknesses' in the CWE, which makes the case for both maintainability and reliability as contributors to security. The CWE is a crowd- (of experts) sourced list of common software and hardware weaknesses that have "security ramifications" It has about 1,300 entries, including quite a few that are used for categorization.