You practically named what people usually check when they are investing in a new project, I would also add real-world use to it, if the ICO they are doing is a service that in the future we can use the tokens to pay for, that's very important, we can also see if they really need the ICO to boost their project or just use it as a dump.