I see your point, and obviously it’s impossible to track every development and review every code, but that’s one of the proposes of having an open source software, this review is done by a large community.
Also, it’s not about not trusting Sublime devs, they can also be hacked and they could be releasing a hacked binary without even knowing it. Being open source just adds more layers of control. Some linux distributions have incredible package maintainers that do a great job releasing and controlling the software, to name just one of those possible layers.
And you are right about bosses, haha, but fortunately it’s not a problem at my company. We are paying licenses for several other libraries and products already. A one time fee is pocket change for a company.
Jose

) development for such a large project may dry up.
. Actually, I just upload to github fast experiments or code I’m not really interested on… Closed source is not necessarily the devil, you know?