Well now they got paid after the critical security vulnerability in 2014 (?), but it's basically just two developers.

Also don't confuse OpenSSL with OpenSSH