whatever has a dep on

commons-logging-commons-logging

could have an exclude, with an optional replacement with the slf4j thing