it seems nowadays people are moving away from jsr305 annotations to other ones (see, for example, https://github.com/google/guava/issues/2960), for example the spotbugs or checker framework annotations. I tried to replace
edu.umd.cs.findbugs.annotations.CheckForNull, but this triggers
java:S2447, which wasn’t there before.
Poking at the code, I found https://github.com/SonarSource/sonar-java/blob/master/java-frontend/src/main/java/org/sonar/java/se/NullableAnnotationUtils.java#L55, which seems to be missing that particular class. Oh, and S2447 isn’t using that helper class at all:
PS: Other places I found with a cursory grep: