Agree on that – adding a dependency on the JSR-305 jar is a really really bad idea for all the reasons already outlined. I'll add another one:
At my place, we have actively been removing any usage of these annotations as you simply can't use these annotations and the "real" javax.annotations package (javax.annotation:javax.annotation-api) under the module system (that was introduced in Java 9, for the record). People are already working on a replacement library (Jetbrains, Google, others), but I forgot the exact URL due to a lack of interest. (The JSR-305 approach to nullability is wrong, broken, and will never work reliably from my POV.) Cheers, Simon
