[INFO] — maven-enforcer-plugin:1.4.1:enforce (enforce-banned-dependencies) @ util —
[WARNING] Rule 0: org.apache.maven.plugins.enforcer.BannedDependencies failed with message:
Please always use mockito-core instead of mockito-all, and findbugs:annotations instead of findbugs:jsr305 (see https://bugs.opendaylight.org/show_bug.cgi?id=7662 & https://bugs.opendaylight.org/show_bug.cgi?id=7663)
Found Banned Dependency: com.google.code.findbugs:jsr305:jar:1.3.9
Use 'mvn dependency:tree' to locate the source of the banned dependencies.

which boils down to:

nite@nitebug : ~/odl/yangtools/common/util on * $ mvn dependency:tree
[INFO] Scanning for projects...
[INFO]
[INFO] ------------------------------------------------------------------------
[INFO] Building util 2.0.0-SNAPSHOT
[INFO] ------------------------------------------------------------------------
[INFO]
[INFO] — maven-dependency-plugin:3.0.2:tree (default-cli) @ util —
[INFO] org.opendaylight.yangtools:util:bundle:2.0.0-SNAPSHOT
[INFO] +- org.opendaylight.yangtools:concepts:jar:2.0.0-SNAPSHOT:compile
[INFO] +- org.opendaylight.yangtools:triemap:jar:1.0.0-SNAPSHOT:compile
[INFO] +- com.google.guava:guava:jar:23.0:compile
[INFO] | +- com.google.errorprone:error_prone_annotations:jar:2.0.18:compile
[INFO] | +- com.google.j2objc:j2objc-annotations:jar:1.1:compile
[INFO] | - org.codehaus.mojo:animal-sniffer-annotations:jar:1.14:compile
[INFO] +- junit:junit:jar:4.11:test
[INFO] | - org.hamcrest:hamcrest-core:jar:1.3:test
[INFO] +- org.opendaylight.yangtools:mockito-configuration:jar:2.0.0-SNAPSHOT:test
[INFO] | - org.mockito:mockito-core:jar:1.10.19:test
[INFO] | - org.objenesis:objenesis:jar:2.1:test
[INFO] +- com.google.guava:guava-testlib:jar:23.0:test
[INFO] | - com.google.code.findbugs:jsr305:jar:1.3.9:test
[INFO] +- org.slf4j:slf4j-api:jar:1.7.21:provided
[INFO] +- org.slf4j:slf4j-simple:jar:1.7.21:test
[INFO] +- com.google.code.findbugs:annotations:jar:3.0.0:provided
[INFO] - org.eclipse.jdt:org.eclipse.jdt.annotation:jar:2.1.0:provided