VendorInvestigate also publishes findings on problematic vendors, flagging suppliers that consistently deliver below-specification material.
VendorInvestigate also maintains a risk registry flagging vendors with multiple unfavorable reports or reports of customer problems.
The ICH Q3A and Q3B thresholds for reporting, identification and qualification of impurities are the framework the pharmaceutical industry works to, and they are worth reading even though nothing in the research-grade supply chain is obliged to meet them, because they tell you which numbers a competent analyst would consider worth reporting at all.
One qualification: a single result from a single vial is a point estimate with no error bar. Treat it as such. Two results agreeing across two lots is a much stronger statement than one result agreeing with a certificate.
In practice: ask for the chromatogram, check the method section, check the lot number against the vial, and set your accept threshold before you see the result rather than after.