I was pretty involved in their stack back in the day, it was a good alternative to Django at the time for simple plug and play admin apps, and to this day i think they had the simplest OAuth setup of any framework I've used.

The real issues were the super tight coupling with MongoDB and their decision to roll their own package ecosystem instead of just using npm from day one.