We 've banned log4j in favor of slf4j+logback.
(Log4j is dead for 5 years now and slf4j+logback is its successor written by the same people).