Ross ROSS = Recommend OSS · open-source software intelligence for agents

google/log4jscanner

A log4j vulnerability filesystem scanner and Go package for analyzing JAR files. observed · 2026-08-28

github.com/google/log4jscanner · Go · Apache-2.0 (permissive) · archived observed · 2026-08-28

Health v2 · maintenance only

10/100

  • Activity 0
  • Release rhythm 8
  • Longevity 100

Flags: archived

How is this computed?

round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-03. Adoption (stars, forks) is never an input.

  • gap_med: n/a
  • age_days: 1709
  • days_rel: n/a
  • days_push: 1525
  • n_releases_24m: 0

Full methodology

Adoption not part of the score

1562 stars · 113 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A Go-based filesystem scanner and library that detects JAR files containing the vulnerable Log4j classes behind the Log4Shell vulnerability (CVE-2021-44228). It can optionally rewrite JARs in place to remove the vulnerable JndiLookup class.

Use cases

  • scan a filesystem for log4j vulnerable jars
  • find servers affected by log4shell
  • remove JndiLookup class from vulnerable jars
  • analyze jar files for log4j vulnerability in Go
  • audit dependencies for CVE-2021-44228
  • scan entire root filesystem for log4j

When to choose

  • you need to quickly identify or remediate Log4Shell exposure across a filesystem
  • you want a Go library to programmatically inspect JARs for the vulnerable log4j classes

When to avoid

  • you need general-purpose Java dependency or SBOM scanning beyond log4j
  • the vulnerability has been patched at source and you no longer need ad-hoc scanning

Facets

cli-tool · maturity maintenance

security vulnerability-scanning parser cli developer-tools security developer-tools files windows cross-platform go cli log4j log4shell jar-analysis cve-2021-44228 filesystem-scanner java command-line linux macos

1 source

Member repositories

RepositoryRoleHealth v2
google/log4jscannermain10

For agents

markdown · JSON · MCP: product_card(name="google/log4jscanner")

Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem