FindBugs upstream has been dead since 2016 and I would like to retire it from Fedora [1].

nom-tam-fits currently has this dependency:

  BuildRequires: mvn(com.google.code.findbugs:annotations)

This is due to this dependency in the nom-tam-fits POM:

    <dependency>
        <groupId>com.google.code.findbugs</groupId>
        <artifactId>annotations</artifactId>
        <version>3.0.0</version>
        <scope>provided</scope>
    </dependency>

That dependency can be downloaded here:

  https://search.maven.org/artifact/com.google.code.findbugs/annotations/3.0.0/jar

It provides classes in these packages:

  * edu.umd.cs.findbugs.annotations
  * javax.annotation (and subpackages)
  * net.jcip.annotations

All these packages contain the word "annotation". Searching the nom-tam-fits source for "annotation", I can only see usage of the SuppressFBWarnings annotation.

I saw this note in src/assembly/BUILD.txt:

  The Annotation jar is only needed for compilation.  If
  you delete all lines with SuppressFBWarnings from the source code
  you can dispense with it altogether.  It is used to suppress warning
  messages in some of the diagnostic tools.

I propose doing exactly that.

[1] https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/YI723NBFFXAOQSRMYIEFAD6CYGX7S6MM/