Code repository is very important too. If you are a developer, you should be able to detect the red flags from it.
Although ICO is usually based on existing blockchain like ETH, we should be careful of new coin ICO too.
In announcement board, there are many scam new coins has been created, they put the link of wallet download there, and it was a virus!