See comments in parent pom.

• JDepend is not maintained; even a fork that superseded it was abandoned
  • points to an alternative static-analysis lib => code-assert
  • consider deptective too
• PMD is mere static analysis, but it currently operates with uncurated default rules (too many static imports, false positives); these are out-of-context and arbitrary in current state of things. Alternative static analysis tools may be considered, ideally we use one, we don't need 3 or 4.