The jdeprscan tool can list where deprecated elements are referenced, for example:

$ jdeprscan J2Ddemo.jar
Jar file J2Ddemo.jar:
class java2d/Tools uses deprecated class java/security/AccessControlException (forRemoval=true)

This doesn't work in cases where methods are invoked by reflection and it may report false positives. For example, the above issue only happens if you get an AccessControlException when doing a PrintJob in an Applet.

We should provide a 'jfr view' that can list deprecated calls discovered during runtime.