report as red if there’s a pending security update