QOS.ch Sarl (Switzerland) is a software design and development company based in Vouvry, Switzerland. Our company has experience building mission-critical enterprise software using the Java language.
Although the quality of support for various open source projects can be good, most are operated on a best-effort basis. If you require authoritative responses and guaranteed response times, then please read on.
As the founding contributors of several open source projects, namelylog4j 1.x,reload4j,slf4j andlogback, we offer professional support for these projects.
The base support package entails guaranteed response times. Just as importantly, it includes a review of your logging practices. Such reviews often result in considerable savings in reduced infrastructure costs. We also offer custom development services.
For more information about our support package please contact us. We will be happy to provide further details and discuss your specific needs.
You can also support SLF4J/logback projects viadonations and sponsorship. We thank our current supporters and sponsors for their continued contributions.
| Email: | sales(at)qos.ch |
| Postal Address: | QOS.ch Sàrl rue Grand-Rue 32 CH-1896 Vouvry (VS) Switzerland |
Regarding the log4shell vulnerability, the prevalence of various java logging libraries puts things into perspective. Here are the relevant figures as found inmvnrepository site on 2024-04-11.
| Project | Category | group:artifact | usageCount | percentage |
|---|---|---|---|---|
| SLF4J | API | org.slf4j:slf4j-api | 67,312 | 69% |
| Commons-logging | API | commons-logging:commons-logging | 11,980 | 12% |
| SLF4J | API | org.slf4j:jcl-over-slf4j | 8,988 | 9% |
| LOG4J 2.x | API | org.apache.logging.log4j:log4j-api | 8,729 | 9% |
| Total | API | - | 96,987 | 100% |
| Project | Category | group:artifact | usageCount | percentage |
|---|---|---|---|---|
| LOGBACK | implementation | ch.qos.logback:logback-classic | 27,222 | 48% |
| LOG4J 1.x | implementation | log4j:log4j | 18,418 | 33% |
| LOG4J 2.x | implementation | org.apache.logging.log4j:log4j-core | 10,757 | 19% |
| Total | implementaion | - | 56,397 | 100% |
Notwithstanding its 48% prevalence overall (in the implementation category), no attacks have been reported against logback that we are aware of.