Hi Gerardo Lisboa,
Thank you for taking the time to review the WxLog Framework and for raising these important concerns,
I will try to address each point,
1. Regarding JAR Files of "Undisclosed Origin"
log4j* -- part of Apache log4j2, widely adopted and actively maintained with regular security updates
disruptor* -- high-performance library, as per my knowledge, it is used by major financial institutions for low-latency
ecs* -- part of elastic
All are regularly scanned for vulnerabilities
2. Regarding "Similar or Equal Functionality of Built-in Services"
Server.log - Basic operational logging, not designed for application-level structured logging
audit logging - heavyweight
no native support for JSON logging, ECS, MDC etc.
3. Regarding Performance Impact
async logging via LMAX disruptor -- non-blocking, sub microsecond latency
lazy evauation - log messages constructed only if level is enabled
4. Regarding the maintenance,
this is a legitimate operational concern, it should be addressed, I have seen the issue you raised in GitHub, will definitely fix this.
------------------------------
Natarajan Ramachandran
------------------------------