It's still risky if you pay unless you have a contract guaranteeing what the renewal price would be.

It would be useful to have some kind of future feasibility risk analysis service for open third party dependencies.

Something that can be plugged into CI.

Perhaps something like this already exists?