> My question is whether we should fix this by adding a logback-core and its > version into our master pom? I'm okay with making the dependency chain explicit, but I might be wrong, not sure of all the ramifications. So, yes, I would add it and see what happens.