Optimal policies for the sizing and timing of software maintenance projects