Thinking about the situation a bit more, I realize that FindBugs plugins like fb-contrib...
Since you have to effectively create your own release, you can give it your own groupId,...
Cannot run FIndBugs 2.0.3 using JRE 8 against a Java 7 classfile
FindBugs 3.0 RC 2 dependencies on a BCEL SNAPSHOT