Open most project risk registers, and you'll find the usual suspects: scope creep, resource availability, vendor delays, budget overruns. What you rarely find is a line item for "the vendor contract this project depends on quietly expires in six weeks." That risk doesn't show up because it doesn't feel like a project risk