Starting from version 4.0 (released 2 years ago), asm's groupId apparently changed to "org.ow2.asm".
  http://asm.ow2.org/
  https://repository.sonatype.org/index.html#nexus-search;gav~org.ow2.asm~asm-parent~~~~kw,versionexpand

Presuming that an upgrade to 4.0 isn't feasible at this time, I suggest we do add this comment in the pom.xml:
\<!-- Starting from asm 4.0 the groupId will need change to org.ow2.asm --\>
Furthermore, we should take care of that nothing ever has both groupId=asm and groupId=org.ow2.asm in the same dependency tree, because both jars use the same java class namespace (package=org.objectweb.asm)

+1 to merge if the comment is added :)