Somehow Guava cannot declare JSR-305 as a dep

Declare it ourselves in the build.