Godot definitely has sponsors which while not directly being “customers” are still very important when it comes to financing the development of the engine
Having said that I want to believe current sponsors won’t have issues with the Godot Foundation here
I mean some people are benefiting from it
[…] it was decided that the language would be called “ECMAScript” instead. (Microsoft happily offered up “JScript”, but no-one else wanted that.) Brendan Eich, the creator of JavaScript and a co-signatory of this letter, wrote in 2006 that “ECMAScript was always an unwanted trade name that sounds like a skin disease.”
I tend to agree with these sentiments
Python with PyPI, C# with Nuget, Docker with Dockerhub, Java with Maven Central, hell even just regular Linux packages from dodgy repositories…
Supply chain attacks concern almost everything everyone everywhere.