An interesting and important question that was already raised, but not yet answered, in another thread:
Is Enpass' built-in password generator part of SQLCipher or otherwise (if yes, how so?) open source and therefore trustworthy?
I currently feel no need to demand to make the whole application open source as long as the security-relevant parts are. But the password generator is one of these and therefore a reassuring answer would be nice.
If it's not open source, what are the plans in that regard? If it is, I think you should advertise that on your website, too.