All Day DevOps: Third of Log4j downloads still pull vulnerable version despite

Until I need some software which is abandoned and depends on this version which is used on an internal network and thus I’m less concerned about its vulnerabilities.

Suffice to say there’s always a case for its use. I think it should be made clearer when you end up using a vulnerable library, but I think they should remain available.