[ 
https://issues.apache.org/jira/browse/CTAKES-557?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17653349#comment-17653349
 ] 

Sean Finan commented on CTAKES-557:
-----------------------------------

I thought about that, and it definitely isn't a bad idea.  Personally I don't 
have any leanings one way or another when it comes to a logging framework, 
facade, service, etc.  Except cout ...  

As far as I know moving to either log4j v2 or slf4j requires a little 
find&replace refactoring in ctakes code, which isn't so bad.  The only thing 
that gives me pause is some custom Appender as I mention above.  It would make 
sense for slf4j to have an equivalent interface, I just haven't looked into it.

I am pretty sure that we would still need to distribute with log4j v2 and the 
log4j v1-v2 bridge to keep safe all older dependencies that use the log4j v1 
api.

> remove log4jv1 dependency
> -------------------------
>
>                 Key: CTAKES-557
>                 URL: https://issues.apache.org/jira/browse/CTAKES-557
>             Project: cTAKES
>          Issue Type: Improvement
>            Reporter: PJ Fanning
>            Priority: Major
>
> Log4jv1 has been EndOfLife for many years and has a number of unfixed 
> security issues. Could you use log4jv2 instead?
>  
> https://repo1.maven.org/maven2/org/apache/ctakes/ctakes-core/4.0.0.1/ctakes-core-4.0.0.1.pom



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to