Stephen Connolly

Last time I checked there were issues with updating because of The use of `javax` package name for the base annotations without a published JSR

I think using spotbugs is the way to go.

https://github.com/spotbugs/spotbugs/tree/release-3.1/spotbugs-annotations though it's LGPL

The issue, iirc, is that if you are using the 3.0.0 version of this library *because* you want Apache license, well you are SOoL because to get binary compat, we...

@slachiewicz is probably your best bet. I'm dragged to a different language by work so not super active in JVM 😭