the vulnerability tooltip is a bit inaccurate.

1. should the first line say "image" instead of "tag"?
2. the first line is ok but would it be better to say
   "This image includes 67 packages with vulnerabilities in 15 of those packages"
3. can we generate the first line without the parenthesis? ie, if only 1 package don't say "package(s)"
4. the icon colors don't match the colors in the bar. i think you need to replace the low vulnerability with the one @tonycgil created that is yellow. (medium vulnerability is orange)

existing tooltip:

mockup provided by @tonycgil: