Consider to replace findbugs with spotbugs

[jimirocks]

On JDK 11 findbugs produces lot of warnings about illega reflection and accessing core module classes. The development has stopped in 2015. Spotbugs is the successor while wirtten from scratch, but is compatible withe newest JDKs