The current pom includes com.google.inject:guice with the default transitive dependency of com.google.guava:guava. Guava has declared several dependencies, which are not needed at runtime. Only com.google.guava:failureaccess is needed.
The proposal is first to add com.google.guava:guava to the excludes of guice. Second guava and failureaccess shall be added as direct dependencies.
This has two advantages: Downstream projects only get the needed dependencies and the version of guava can be independently set.
The runtime dependencies for Guava are explained in the last section of the README "Important Warnings" #3