You may want to look into what the various TCKs use for api checking. These are part of the tools that validate JSF, or EE5 implementations.
There may also be a maven plugin out there, but I don't believe we are using one.
thanks for the fast answer, I found the clirr project, which has a maven plugin, im evaluating it. maybe you guys should use something similar and report the API changes on new versions....