modified version of Apache XML Security that does not contain any commons-logging dependency - View it on GitHub