3 ms·
A large part of this problem is caused by the ubiquitous use of transitive dependency resolvers in Java build tools like maven and gradle. Developers are not ev
by johnthuss 4y ago
A large part of this problem is caused by the ubiquitous use of transitive dependency resolvers in Java build tools like maven and gradle. Developers are not even aware that log4j is one of their dependencies because they are not using it directly, only transitively.