pub fn worst_classification(
mentions: Vec<AlgorithmClassification>,
) -> Option<AlgorithmClassification>Expand description
The most severe classification among mentions (first wins on ties),
per AlgorithmClass::severity_rank. Callers that must reduce a
multi-algorithm identity (“sha384-rsa-cert-chain”) to one verdict use
this so the worst algorithm is reported, never whichever token happened
to appear first.