Tattletale "complains" that pax-logging-api and pax-logging-service both contain org.apache.log4j (and some sub packages), but these are different things: the log4j stuff in -service is "internal", not exported (this particular implementation just happens to be based on an embedded log4j implementation), the stuff in -api is exported (the log4j api is a subset of the paxlogging api).

I think tattletale should  somehow be able to take that into account, or have an osgi-aware 'multiple jar files' report.