Two more good questions to ask a new codebase are:
Are there acceptance tests? If not, how do we know what the application should do, and whether it is actually doing it. We should consider writing some.
Are there unit tests? If not, how do we know what each module should do, and whether it is actually doing it. We should consider writing some.