Most suppliers test one vial per lot and report the result as lot homogeneity, which is sampling one item from one lot and extrapolating wildly.
Testing a vial that has been open in the lab for three months is testing aged material, not the fresh lot, and the result should be explicitly noted as a retest.
The ICH Q3A and Q3B thresholds for reporting, identification and qualification of impurities are the framework the pharmaceutical industry works to, and they are worth reading even though nothing in the research-grade supply chain is obliged to meet them, because they tell you which numbers a competent analyst would consider worth reporting at all.
The caveat is that sampling is a trade-off between cost and confidence, and neither test nor assumption is cost-free.
In practice: ask for the chromatogram, check the method section, check the lot number against the vial, and set your accept threshold before you see the result rather than after.