scio icon indicating copy to clipboard operation
scio copied to clipboard

Published 20 hours ago • verified publisher icon spotify

Consider reload4j as a replacement of log4j 1.2

Open labianchin opened this issue 2 years ago • 0 comments

Scio points to log4j 1.2.7. I guess it is used in a few modules, including scio-parquet (apparently as a transitive dependency of hadoop.

Note now there is reload4j which "aims to fix the most urgent issues in log4j 1.2.17".

Given that, scio/scio-parquet could exclude log4j 1.x dependencies, replacing with reload4j. Should it?

labianchin avatar Jan 18 '22 09:01 labianchin