Can `violations` ever be null?