google / google/bughunters

Please put Apache Shiro into the Tier 1 list

Open Beginner friendly
#58 0 comments 9 reactions 0 assignees View on GitHub
Dominant language
No language data
Stars
297
Forks
59
Avg merge
2h 35m
Merged PRs (30d)
1

Description

Hi,

Can you please put Apache Shiro in a Tier 1 list?

Apache Wicket and Apache Struts are Tier 1, and Apache Shiro as widely used as them (maybe more),
and has more GitHub stars that either of those frameworks.
Since Shiro is a security framework itself, bugs in it would have a bigger impact.

Apache Shiro is a widely-used Java Application Security framework.

- 15 years old
- 4,400+ stars
- Widely used Java dependency
- CVEs tend to be high impact (path traversal, authentication bypass)
- Many security reports and CVEs already processed

Thank you

Contributor guide

Open the contributing guide

Research direction

Start by locating the repository's Tier 1 list and inspect the existing Apache Wicket and Apache Struts entries for their format and placement. Add Apache Shiro consistently with those entries, then verify that the list includes the requested project and preserves the surrounding structure.

Written by the indexing model from the issue text.

Assessment

Tech stack
java
Domain
security
Issue type
Feature
Difficulty
2/5
Estimated time
1-3 hours
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
68/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.