Why are you depending on hibernate-validator? Now you pull in a whole implementation of javax.validation and make it hard for others that want to use a newer implementation of hibernate-validator. Why not compile against the validation API and instruct users to pull in hibernate-validator themself?