well, ripgrep is not a company.. what means to "buy" an open source project?
companies either "fund" open source developers (usually a pittance), "contribute" code, or if all fails "fork" them, but straight buying, that's something I never see
In slave states without proper civil rights, like the US, you can buy them. Your contract forbids everything. Eg every SW you produce in private belongs to the company, not to you. Or everything you say in private will affect your contract.