How does Snyk determine the severity of a license issue?