FindBugs is dead for some time and has problems with Java 9.
Successor is SpotBugs - same code, different artifacts. It should be fairly easy to migrate it.
We will need to change dependencies, profiles and properties.