through findbugs.
See this pom:
http://repo1.maven.org/maven2/net/jcip/jcip-annotations/1.0/jcip-annotations-1.0.pom
Not even a license is stated. How could this even land in maven central?
Can't update to 3.2.1 because my license plugin complains it cannot find a license for that dependency.