While some bounty hunters lay more emphasis on the community members of the project. I tend to look at the technical aspect of the Whitepaper, website structure and team because I have seen a lot of projects with large communities failed.
What you're doing is the way to go to know if you want to know if a bounty is good or not. I suggest that you also try to contact the bounty manager or the team behind the email if you have further questions regarding the bounty campaign, send them an email or two. Also see the number of participants the number of participants can help you determine if the project is legit or not, but this is not the most reliable way to do it. Sometimes it's just luck that the bounty campaign you participated in is legit.