Tweaked pom.xml so that mvn2 project runs clean. It looks like the findbugs plugin for Maven2 has bitrotten into irrelevance and the docs on how to upgrade to Maven3 are sparse. Will run findbugs via Eclipse.

Author: mikesamuel

pom.xml

@@ -48,12 +48,23 @@ application while protecting against XSS.
       <url>https://oss.sonatype.org/content/repositories/snapshots</url>
     </snapshotRepository>
   </distributionManagement>
+
+  <issueManagement>
+    <system>GitHub</system>
+    <url>https://github.com/OWASP/java-html-sanitizer/issues</url>
+  </issueManagement>
+
+  <organization>
+    <name>OWASP</name>
+    <url>https://owasp.org</url>
+  </organization>
+
   <build>
     <plugins>
       <plugin>
 	<groupId>org.sonatype.plugins</groupId>
 	<artifactId>nexus-staging-maven-plugin</artifactId>
-	<version>[1.6.5,)</version>
+	<version>1.6.3</version>
 	<extensions>true</extensions>
 	<configuration>
           <serverId>ossrh</serverId>
@@ -149,13 +160,13 @@ application while protecting against XSS.
     <dependency>
       <groupId>com.google.code.findbugs</groupId>
       <artifactId>jsr305</artifactId>
-      <version>[1.3.9,)</version>
+      <version>[2.0.1,)</version>
       <scope>provided</scope>
     </dependency>
     <dependency>
       <groupId>com.google.code.findbugs</groupId>
       <artifactId>annotations</artifactId>
-      <version>[1.3.9,)</version>
+      <version>[2.0.1,)</version>
       <scope>provided</scope>
     </dependency>
 
@@ -174,29 +185,6 @@ application while protecting against XSS.
     </dependency>
   </dependencies>
 
-  <reporting>
-    <plugins>
-      <!-- `mvn compile site` will generate target/site/findbugs.html -->
-      <!-- http://mojo.codehaus.org/findbugs-maven-plugin/usage.html -->
-      <!-- http://www.petrikainulainen.net/programming/maven/findbugs-maven-plugin-tutorial/ -->
-      <plugin>
-        <groupId>org.codehaus.mojo</groupId>
-        <artifactId>findbugs-maven-plugin</artifactId>
-        <version>2.5.2</version>
-        <configuration>
-          <!--
-            Enables analysis which takes more memory but finds more bugs.
-            If you run out of memory, changes the value of the effort element
-            to 'Low'.
-          -->
-          <effort>Max</effort>
-          <!-- Reports all bugs (other values are medium and max) -->
-          <threshold>Low</threshold>
-        </configuration>
-      </plugin>
-    </plugins>
-  </reporting>
-
   <properties>
     <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
   </properties>