Confirming log4j not a dependency

[amcintosh]

Due to the current log4j madness, I just wanted to clarify that log4j is not currently a dependency, either directly or indirectly:

runtimeClasspath - Runtime classpath of source set 'main'.
+--- org.apache.commons:commons-math3:3.6.1
+--- com.google.http-client:google-http-client:1.40.1
|    +--- org.apache.httpcomponents:httpclient:4.5.13
|    |    +--- org.apache.httpcomponents:httpcore:4.4.13 -> 4.4.14
|    |    +--- commons-logging:commons-logging:1.2
|    |    \--- commons-codec:commons-codec:1.11
|    +--- org.apache.httpcomponents:httpcore:4.4.14
|    +--- com.google.code.findbugs:jsr305:3.0.2
|    +--- com.google.guava:guava:30.1.1-android -> 31.0.1-jre
|    |    +--- com.google.guava:failureaccess:1.0.1
|    |    +--- com.google.guava:listenablefuture:9999.0-empty-to-avoid-conflict-with-guava
|    |    +--- com.google.code.findbugs:jsr305:3.0.2
|    |    +--- org.checkerframework:checker-qual:3.12.0
|    |    +--- com.google.errorprone:error_prone_annotations:2.7.1
|    |    \--- com.google.j2objc:j2objc-annotations:1.3
|    +--- com.google.j2objc:j2objc-annotations:1.3
|    +--- io.opencensus:opencensus-api:0.28.0
|    |    \--- io.grpc:grpc-context:1.27.2
|    \--- io.opencensus:opencensus-contrib-http-util:0.28.0
|         +--- io.opencensus:opencensus-api:0.28.0 (*)
|         \--- com.google.guava:guava:29.0-android -> 31.0.1-jre (*)
+--- com.google.guava:guava:31.0.1-jre (*)
+--- org.slf4j:slf4j-api:1.7.32
\--- com.google.http-client:google-http-client-gson:1.40.1
     +--- com.google.http-client:google-http-client:1.40.1 (*)
     \--- com.google.code.gson:gson:2.8.8