1. A computer program product embodied in a computer readable medium that, when executing on one or more computers, performs the steps of: a. assessing a metadata factor associated with metadata of code to determine a compliance state of said code; b. at least one of assigning and adjusting a security sensitivity factor based at least in part on said compliance state of said code; and c. providing a security facility with an indicator of how to treat said code, wherein said indicator is based on said security sensitivity factor.