Why this score
Not enough measured signals for Owner-safe, and the score is outside the Needs-a-techie band. Captured 2026-10-15. Unmeasured signals add nothing and are not treated as failures.
Alive14/20
- Last push. 8 points. GitHub pushed_at was 0 days before 2026-10-15.
- Releases in 12 months. 6 points. The public releases feed shows at least 10 tagged releases in the last 12 months.
- How fast issues close. Not measured. Median issue-close time is not in the seed snapshot, so this signal is omitted.
Trusted7.1/20
- OpenSSF Scorecard. 5.1 points. OpenSSF Scorecard 7.3 out of 10.
- Open critical or high vulnerabilities. Not measured. Open vulnerability counts were not fetched. We do not assume zero.
- Contributors in 90 days. Not measured. 90-day contributor counts were not fetched.
- Bus factor. Not measured. Contributor share was not fetched.
- Stars. 2 points. 39,333 stars, log-scaled and capped at 20,000.
Takeoverable9.8/25
- Licence. 6 points. Licence class network copyleft.
- Stack. 3.8 points. TypeScript. TypeScript, JavaScript, Python, Go, PHP, and Vue score as widely hireable.
- Tests and CI. Not measured. We did not confirm a test suite. Missing CI at the usual paths is treated as unknown, not as a failure.
- Docs quality. Not measured. Docs quality is an LLM rubric. v1 does not invent that score.
- Data export. Not measured. Data-export was not audited app by app, so it is omitted.
Easy to run5/20
- One-click deploy. Not measured. No one-click host was verified for this app, so the signal is omitted rather than scored as a failure.
- Managed cloud or done-for-you. 5 points. SeatLess offers done-for-you setup. A vendor cloud, where listed, is the vendor’s own hosting, not a licence you own.
- Docker Compose. Not measured. No Dockerfile or Compose file at the usual paths. It may still exist elsewhere, so this is omitted.
- Memory needs. Not measured. Memory needs were not measured.
- Setup steps. Not measured. Setup-step rubric was not run.
Feature fit15/15
- Coverage of the incumbent’s main jobs. 15 points. Editorial reading of public docs. Not a certified feature audit. Unknown jobs are left out of the average.
What it replaces
Mattermost is channels, threads, and integrations, in the Slack-shaped job. The licence text says compiled builds from Mattermost are MIT, while source you compile yourself is AGPL-3.0 unless you buy a commercial licence. Read LICENSE.txt. That nuance is the listing, not a footnote.
Feature coverage vs Slack
Editorial, from public descriptions. A dash means we did not assess that job. This is not a lab test, and Salesforce has not reviewed it.
Licence, in plain language
AGPL-3.0 Network copyleft
You can use, change, and run it. If you offer the software as a service, you share the changes you make. That is the usual Affero GPL bargain.
Source: AGPL-3.0 or a commercial licence. Compiled Mattermost builds: MIT. Admin templates and some web files: Apache-2.0. See LICENSE.txt.
Suggest an edit