Oak security severity rating

[jcr-oaksec]

Hello!

Oak Security doesn´t use the same severity scale as others do, which outputs misrepresented results IMO.

Instead of Crit-High-Med-Low-Info we use Crit-Major-Minor-Info. This resulted in our data showing that we have zero Criticals in our reports, which is misleading.

[engn33r]

This is what the plot that combines Critical and High findings together is intended to help with. The warnings and caveats section was written because it's very easy to make bad conclusions from this data, PRs are welcome if you think additional clarification could help there.