Maven Enforcer Plugin - enforce Log4J 2 >= 2.15.0

log4j2-maven-enforcer-plugin-configuration.txt

...
<build>
<plugins>
...
<plugin>
    <groupId>org.apache.maven.plugins</groupId>
    <artifactId>maven-enforcer-plugin</artifactId>
    <version>3.0.0</version>
    <executions>
        <execution>
            <id>enforce-safer-logging</id>
            <goals>
                <goal>enforce</goal>
            </goals>
            <configuration>
                <rules>
                    <!-- https://cwiki.apache.org/confluence/display/MAVENOLD/Dependency+Mediation+and+Conflict+Resolution#DependencyMediationandConflictResolution-DependencyVersionRanges -->
                    <bannedDependencies>
                        <!-- banned -->
                        <excludes>
                            <exclude>log4j:log4j</exclude><!-- ban Log4J 1.x -->
                            <exclude>org.apache.logging.log4j:*:(,2.15.0)</exclude><!-- ban Log4J lt 2.15.0 -->
                        </excludes>
                    </bannedDependencies>
                </rules>
            </configuration>
        </execution>
   </executions>
</plugin>
...
</plugins>
</build>
...