Hi Flow,
here is an issue that one third party static scan found in our project in which we are using smack library:
Improper resource shutdown or release (CWE - CWE-404: Improper Resource Shutdown or Release (2.8) )
on line: Smack/XMPPTCPConnection.java at master · Flowdalic/Smack · GitHub