Hacker News new | ask | show | jobs
by hagbard_c 1653 days ago
I just had a look at Airsonic [1] since I'm both a user and a developer and happened upon a related question on Github. Not having access to any fancy-schmancy "SBOM SAAS tool (<blink>try it now for free!!1!</blink>) I just git-grepped the repo which gave me 2 hits. Looking at those I found they were caused by (Apache) commons-logging.jar containing stubs to interface with Log4j. Problem solved.

[1] https://github.com/airsonic-advanced/airsonic-advanced/issue...