"renders package unusable" is normally only worth a "grave" severity, but in this case, a nonfunctional dnssec-trigger can break DNS resolution for the entire system, so I think "critical" is justified.