4 ms·
> hundreds of thousands of project have "log4j" in their dependency list That's on them. They can migrate to wyldfire-fixed-log4j if they want, or to whatever
by mantaraygun 5y ago
> hundreds of thousands of project have "log4j" in their dependency list
That's on them. They can migrate to wyldfire-fixed-log4j if they want, or to whatever other fork they want, or they can keep using the old busted shit. It's up to them, there's no problem here.