Download
You can manually download all published Log4j distributions, verify them, and see their licensing information by following the instructions in the Download page of Logging Services.
|
Source distribution
You can download the source code of the latest Log4j release using the links below:
Sources |
|
---|---|
Checksum |
|
Signature |
|
Signing keys |
Binary distribution
A set of binaries of Log4j is available through two main distribution channels:
- ASF Nexus Repository
-
All the binary artifacts are available on the Apache Software Foundation
repository.apache.org
Nexus repository. Its content is mirrored to the Maven Central repository.See Components for more information on the GAV coordinates of the artifacts.
- Binary distribution archive
-
All the artifacts in the ASF Nexus repository are also available in a single ZIP archive:
Table 2. Binary distribution files Binaries
Checksum
Signature
Signing keys
The authenticity of the Log4j binary release is independently verified by the
Reproducible Builds for Maven Central Repository
project.
You can check the reproducibility status of the artifacts on their
|
Software Bill of Materials (SBOM)
Each Log4j artifact is accompanied by a Software Bill of Materials (SBOM). See the Download page of Logging Services page for details.