reload4j is the fork of Apache log4j 1 aimed to support this version because a lot of projects still needs it. And yes, reload4j reports version number 1.x because it is fully compatible with Apache log4j. We recommend your customer to hire third party independent experts to check reload4j...