* the name and purpose

cpp - C preprocessor directive indenter

* how long has it been around?

few years

* how well has it been tested?

worked for me in one case

* what is the upstream project?

https://savannah.gnu.org/projects/cppi/

* does it have a track record of security issues?

no and unlikely to ever have one

* what is the purpose of having it in the distribution?

allow coreutils development

* who are its users?

coreutils developers

* what is the license?

GPLv3+