Add some more forbidden-apis to prefer core JDK classes over Guava and commons-codec Also prevent java logging from being used inadvertently