I audited Mattermost 1.x through 3.x a while back. Had some issues but everything was fixed smoothly and from 3.x it is actually really good. Slides from my talk on it here: https://speakerdeck.com/addelindh/hacking-mattermost-an-asse...