Well, my 10 year old spaghetti-code rewrite of my 22 year old password manager is written in Racket [1], but I don't think about 1/3 sales per year qualify as commercial. If I ever have the time, I'll rewrite it in another language with proper memory locking and better password stretching.

[1] http://peppermind.com