We do have several modules with a json package that contains a shaded version of the basic JSON library: spring-boot-cli, spring-boot-configuration-processor, and spring-boot-configuration-metadata.
The Nullmarked check has been disabled as we can 't configure it to ignore those packages. Perhaps this could be generalized so that no check applies to those packages.