apache / shiro
Apache Shiro is a powerful and easy-to-use Java security framework that performs authentication, authorization, cryptography, and session management
- Stars
- 4,465 stars
- Forks
- 2,294 forks
- Language
- Java
- License
- APACHE-2.0
- Created
- Aug 29, 2009
- Last push
- Nov 10, 2026
- Updated
- Nov 10, 2026
Admitted to the Repository Index on Nov 10, 2026: 4,465 stars on 2026-11-10.
Star History
188 days recorded, May 8, 2026 – Nov 11, 2026 (UTC). Net change +54 stars.
The star count of each day is the latest count minus the net stars of the later days.
Add this Star History to a README
The images follow the light or dark theme of the page that shows them, and update every hour.
Add ?theme=light or ?theme=dark
to the chart address to keep one theme.
Star History chart
[](https://awesomerepos.com/apache/shiro) Badge
[](https://awesomerepos.com/apache/shiro) Timeline
It gained stars on 44 of the 188 days recorded since May 8, 2026.
Its largest 7 days were Jul 4, 2026 to Jul 10, 2026: 11 stars.
In the 30 days to Nov 11, 2026 it got 5 stars, 29% fewer than in the 30 days before.
It had 4,411 stars before May 8, 2026 and has 4,465 stars now: 535 fewer than 5,000.
- Created on the Repository Host
- Release shiro-root-2.2.0: Apache Shiro 2.2.0
- Release shiro-root-2.2.1: Apache Shiro 2.2.1
- Release shiro-root-3.0.0: Apache Shiro 3.0.0
- +2 stars in one day
- Largest star day recorded: +6 stars
- +2 stars in one day
- Release shiro-root-3.0.1: Apache Shiro 3.0.1
- Release shiro-root-3.0.2: Apache Shiro 3.0.2
- Entered the Repository Index: 4,465 stars on 2026-11-10
- Latest push
The timeline comes from the creation date and the releases on the Repository Host, the Admission, the Star History, and the Observations. Star milestones show only when the Star History records the day. The list shows up to 5 stable releases from the latest 10 releases recorded. When none of them is stable, one item counts the pre-releases. On the chart of net stars each day, a solid line marks each recorded release.
Forks and pushes
From 2 Observations, Nov 11, 2026 – Nov 12, 2026. Forks +2. AwesomeRepos saw a new push on 0 of 1 days.
- Nov 12, 2026: no new push
A filled day: the last push time changed since the Observation before it.
Health facts
Measured facts in four separate dimensions, each with a date and a source. AwesomeRepos does not add them into one score. AwesomeRepos reads the weekly commits, the changelog, and the community files each week for the 5,000 visible repositories with the most stars and for each rising repository. How AwesomeRepos defines each check
Copies a prompt for a coding agent. It has 1 task for the maintainers of apache/shiro.
Improve the Health Facts of the GitHub repository apache/shiro. AwesomeRepos measures facts about how a repository is maintained, released, secured, and documented. Its page for this repository is https://awesomerepos.com/apache/shiro. A change to the repository can improve each of the item below. Each item gives the measured fact or score, and a task. 1. The newest release tag is a semantic version Fact: The newest release tag is shiro-root-3.0.2. Rule: The tag of the newest release has the form 1.2.3 or v1.2.3, with an optional pre-release or build part. There is no data when the repository has no release. Task: Make the next release tag a semantic version (1.2.3 or v1.2.3). Do not change or delete a published tag. If a release tool makes the tags, configure it for semantic versions, and write the version scheme in the contributing guide. Rules for this work: - Each file must be true for this project. Do not copy text that does not apply to it. - Do not choose a licence, a contact, or a release version for me. Ask me. - Do not publish a release, change a repository setting, or push to the default branch. Make the changes on a new branch. - Keep each change small, and run the checks of this repository before you finish. - At the end, list each item as DONE, SKIPPED (with the reason), or NEEDS A DECISION (with the question). AwesomeRepos reads these facts again in its next scan. The definitions of the checks: https://awesomerepos.com/health-facts
Maintenance
2 of 4 checks (2 without data)-
Yes: Not archived
GitHub does not mark the repository as archived. Source
-
Yes: A push in the last 90 days
Last push on 2026-11-10, 2 days ago. Source
-
No data: Commits in the last 13 weeks
No data: AwesomeRepos has not read the weekly commits.
-
No data: Commits in 26 or more of the last 52 weeks
No data: AwesomeRepos has not read the weekly commits.
Releases
1 of 3 checks (1 without data)-
Yes: A release in the last 365 days
Newest release shiro-root-3.0.2 on 2026-11-08, 4 days ago. 7 releases in the last 365 days. Source
-
No: The newest release tag is a semantic version
The newest release tag is shiro-root-3.0.2. Source
-
No data: A changelog file at the root
No data: AwesomeRepos has not scanned this repository.
Security practice
0 of 1 check (1 without data)-
No data: A security policy
No data: AwesomeRepos has not scanned this repository.
AwesomeRepos has not asked OpenSSF Scorecard about this repository.
Community files
1 of 3 checks (2 without data)-
Yes: A licence
GitHub finds the licence APACHE-2.0. Source
-
No data: A contributing guide
No data: AwesomeRepos has not scanned this repository.
-
No data: A code of conduct
No data: AwesomeRepos has not scanned this repository.
Dependencies in the index
This section shows the packages that connect this repository to other repositories in the index.
AwesomeRepos has not scanned the dependency graph of this repository yet. The scan reads each visible repository, the most stars first.
26 scanned repositories name a package from this repository.
Uses (in the index) · 0
No data.
Used by (in the index) · 26
-
Maven: org.apache.shiro:shiro-spring, org.apache.shiro:shiro-spring-boot-starter, org.apache.shiro:shiro-web
-
Maven: org.apache.shiro:shiro-spring
-
Maven: org.apache.shiro:shiro-spring
- vulhub/vulhub 21K
Maven: org.apache.shiro:shiro-spring
- neo4j/neo4j 17K
Maven: org.apache.shiro:shiro-cache, org.apache.shiro:shiro-crypto-core, org.apache.shiro:shiro-crypto-hash, org.apache.shiro:shiro-lang
- shuzheng/zheng 17K
Maven: org.apache.shiro:shiro-spring, org.apache.shiro:shiro-web
- theonedev/onedev 15K
Maven: org.apache.shiro:shiro-guice, org.apache.shiro:shiro-web
-
Maven: org.apache.shiro:shiro-spring, org.apache.shiro:shiro-spring-boot-starter, org.apache.shiro:shiro-web
- apereo/cas 11K
Maven: org.apache.shiro.crypto:shiro-hashes-argon2, org.apache.shiro.crypto:shiro-hashes-bcrypt, org.apache.shiro:shiro-cache, org.apache.shiro:shiro-config-core and 6 more
-
Maven: org.apache.shiro:shiro-spring, org.apache.shiro:shiro-web
Show all 26
- apache/shenyu 8.9K
Maven: org.apache.shiro:shiro-spring, org.apache.shiro:shiro-web
- yangzongzhuan/RuoYi 8.7K
Maven: org.apache.shiro:shiro-jcache, org.apache.shiro:shiro-spring, org.apache.shiro:shiro-web
-
Maven: org.apache.shiro:shiro-spring, org.apache.shiro:shiro-web
- 527515025/springBoot 6.8K
Maven: org.apache.shiro:shiro-spring
- apache/zeppelin 6.7K
Maven: org.apache.shiro:shiro-config-core, org.apache.shiro:shiro-web
- apache/camel 6.4K
Maven: org.apache.shiro:shiro-crypto-cipher, org.apache.shiro:shiro-jakarta-ee
- killbill/killbill 5.9K
Maven: org.apache.shiro:shiro-cache, org.apache.shiro:shiro-config-core, org.apache.shiro:shiro-crypto-core, org.apache.shiro:shiro-crypto-hash and 3 more
- dromara/lamp-cloud 5.8K
Maven: org.apache.shiro:shiro-spring, org.apache.shiro:shiro-web
- dunwu/db-tutorial 5.4K
Maven: org.apache.shiro:shiro-spring
-
Maven: org.apache.shiro:shiro-spring, org.apache.shiro:shiro-web
-
Maven: org.apache.shiro:shiro-spring, org.apache.shiro:shiro-web
- apache/activemq 2.5K
Maven: org.apache.shiro:shiro-spring
- apache/inlong 1.5K
Maven: org.apache.shiro:shiro-spring
- wicketstuff/core 352
Maven: org.apache.shiro:shiro-spring, org.apache.shiro:shiro-web
- lmco/streamflow 257
Maven: org.apache.shiro:shiro-guice, org.apache.shiro:shiro-web
- fcrepo/fcrepo 254
Maven: org.apache.shiro:shiro-jakarta-ee, org.apache.shiro:shiro-spring, org.apache.shiro:shiro-web
Sources: the GitHub dependency graph of each repository, and deps.dev for the source repository of each package . A dependency graph also names development packages. deps.dev takes most source repositories from package metadata. How the dependency graph is made
Observations
Latest Observation, Nov 12, 2026: 4,465 stars, 2,294 forks, last push Nov 10, 2026, not archived. One of 2 Observations since Nov 11, 2026.