A Fuzzy Model for Vendor Rating with Risk Assessment