supplier red flags