The format of vulnerability scanning result report should be refactored and improved to avoid confusions.

[steven-zou]

Currently, we summarize info based on package. Maybe it should be displayed directly with CVE counts of different severities.

[reasonerjt]

Summarize the based on packages are for rendering the status bar.
I believe the confusion was due to misleading text messages on UI, if we can clarify the number are the number of packages, not actual CVE vulnerabilities, there won't be issues.

[zhoumeina]

I will asign this UI changes to the new comer to familiar with the code.

[zhoumeina]

@lweitzman , I agree. It do lead misunderstanding of Vulnerabilities number. Could you help to give a new design about this? What about show "XX Vulnerabilities in XX packages."

[lweitzman]

do we have the number of vulnerabilities for each package? is it useful at this point to know the number of vulnerabilities per package or just that XX packages have vulnerabilities?
also, could we align the number (right align) and the text (left allign) on the page?