Last Friday I was reviewing our backlog items in the Java Engineering Group, and found an idea we had when Log4Shell happened. To this day, there is still no main stream solution to "find in production where a given JAR is being used". Why runtime truth matters (Log4Shell) When Log4Shell hit, lots of teams hunted for log4j through source contro...