A company has a closed source project and they either go out of business or they get disinterested in continuing that project. I think the risk is really if you're using this and it goes away and then you're stuck. That is definitely a real risk. And I have seen that happen with companies that actually had to rewrite their entire code base because they use something proprietary. Choose it, not choose it, putting money inside. It's both is free.