update/outdated: don't access missing package info
If a dependency isn't currently installed, don't try to access
information about it.

Fixes #3820, a regression caused by #3798 and #3578