log4j-1.2-api and log4j-api are pulling JUnit in as a transitive dependency in the compile scope. This causes a problem for me as the version of JUnit pulled in has security & license issues that prevent it being deployed in my env.
Since JUnit shouldn't be in the compile scope anyway, and this SDK already explicitly pulls JUnit in to the testscope, we should exclude JUnit from the log4j-1.2-api and log4j-api dependencies
log4j-1.2-apiandlog4j-apiare pulling JUnit in as a transitive dependency in thecompilescope. This causes a problem for me as the version of JUnit pulled in has security & license issues that prevent it being deployed in my env.Since JUnit shouldn't be in the
compilescope anyway, and this SDK already explicitly pulls JUnit in to thetestscope, we should exclude JUnit from thelog4j-1.2-apiandlog4j-apidependencies