Assembly Line

Apache Shiro

Apache Shiro is a powerful and easy-to-use Java security framework that performs authentication, authorization, cryptography, and session management

Apache Shiro is an open-source web framework project on GitHub under the Apache-2.0 license (permissive), with 4.5k stars. It is built with JDK. Its last push was 2 days ago.

Stars
4.5k
License
Apache-2.0
Activity
Active
Latest release
shiro-root-3.0.1

Code on GitHub Website

Judgement

What it is
Building block
What it does
A Java security library that handles authentication, authorization, session management and cryptography for applications of any size.
Adopt it when
You need login and permission checks in a Java app and want something simpler than Spring Security, or you already run Shiro.
Watch out
Most new Java projects use Spring Security, and Shiro has had a steady run of authentication-bypass CVEs, so keep it patched.
Ready for
Production-ready
Runs as
Library
Built with
Java
How established
Established: started 17 years ago, latest release shiro-root-3.0.1.
What the license allows
You can build it into a product you sell, as long as you keep its copyright notice.

Judged on 2026-11-06 from the project's README and GitHub data. The license and age lines are worked out directly.

Built from

JDK

Follow it down: Apache Shiro → JDK → LLVM project → runs on a microchip

How compilers were built, back to punched paper tape

Open-source alternatives to Apache Shiro

  1. 1
    React react

    The library for web and native user interfaces.

    Framework or platform Production-ready You build interactive front ends and want the largest ecosystem and hiring pool.

    ★ 252k MIT JavaScript Active, pushed today
  2. 2
    Flutter flutter

    Flutter makes it easy and fast to build beautiful apps for mobile and beyond

    Framework or platform Production-ready You want one team to ship polished apps on mobile and desktop from a shared codebase.

    ★ 181k BSD-3-Clause Dart Active, pushed today
  3. 3
    FastAPI fastapi

    FastAPI framework, high performance, easy to learn, fast to code, ready for production

    Framework or platform Production-ready You build JSON APIs or ML services in Python and want typed, async code with free docs.

    ★ 104k MIT Python Active, pushed today
  4. 4
    Angular angular

    Deliver web apps with confidence 🚀

    Framework or platform Production-ready You build large enterprise web apps and want a complete, opinionated framework with long-term support.

    ★ 101k MIT TypeScript Active, pushed today
  5. 5
    Django django

    The Web framework for perfectionists with deadlines.

    Framework or platform Production-ready You are building a data-driven web app in Python and want batteries included.

    ★ 92k BSD-3-Clause Python Active, pushed today
  6. 6
    Svelte sveltejs

    web development for the rest of us

    Framework or platform Production-ready You want small bundles and simple component code for a new front end.

    ★ 89k MIT JavaScript Active, pushed today
  7. 7
    Flask pallets

    The Python micro framework for building web applications.

    Framework or platform Production-ready You want a minimal Python web framework where you choose your own database and components.

    ★ 75k BSD-3-Clause Python Active, pushed 6 days ago
  8. 8
    Express expressjs

    Fast, unopinionated, minimalist web framework for node.

    Framework or platform Production-ready You want the most widely known, unopinionated Node.js server framework.

    ★ 70k MIT JavaScript Active, pushed 3 days ago

Stars, license and activity come from GitHub and refresh on a rolling hourly schedule. The project's own description is quoted as written.