In the past it was entirely open source, though the hosted version did check for a license key before enabling the premium features. That said, the code for the premium features and the license key check were themselves open source.

I see some of the newer premium features, particularly around SSO are under a noncommercial visible source license of their own devising though