The Apache Software Foundation
The Apache Software Foundation Incubator

Shiro Project Incubation Status

This page tracks the project status, incubator-wise. For more general project status, look on the project website.

The Shiro project graduated on 2010-09-22


Shiro is a powerful and flexible open-source Java security framework that cleanly handles authentication, authorization, enterprise session management and cryptography. Shiro entered the Apache Incubator in June, 2008.


  • 2010-08-16 Project starts the graduation vote!
  • 2010-08-16 Project releases version 1.0.0-incubating
  • 2009-09-18 New Committer: Kalle Korhonen
  • 2009-06-10 Project changes its name from Ki to Shiro.
  • 2009-03-04 Project changes its name from JSecurity to Ki.
  • 2008-05-20 Project enters incubation.

Project info

Project info in a nutshell:

item type reference
Official Website www
. wiki
Developers Mailing List dev
Commits Mailing List commits
User Mailing List user
Bug tracking Jira
Source code svn
Mentors adc Alan D. Cabrera
pzf Paul Fremantle
elecharny Emmanuel Lecharny
clr Craig Russell
Committers aditzel Allan Ditzel
jhaile Jeremy Haile
lhazlewood Les Hazlewood
pledbrook Peter Ledbrook
tveil Tim Veil

Incubation status reports

Incubation work items

Project Setup

This is the first phase on incubation, needed to start the project at Apache.

Item assignment is shown by the Apache id. Completed tasks are shown by the completion date (YYYY-MM-dd).

Identify the project to be incubated

date item
2009-07 Make sure that the requested project name does not already exist and check to be sure that the name is not already trademarked for an existing software product.
N/A If request from an existing Apache project to adopt an external package, then ask the Apache project for the SVN module and mail address names.
DONE If request from outside Apache to enter an existing Apache project, then post a message to that project for them to decide on acceptance.
DONE If request from anywhere to become a stand-alone PMC, then assess the fit with the ASF, and create the lists and modules under the incubator address/module names if accepted.

Interim responsibility

date item
2008-05-09 Identify all the Mentors for the incubation, by asking all that can be Mentors.
2008-06-12 Subscribe all Mentors on the pmc and general lists.
2008-06-19 Give all Mentors access to the incubator SVN repository. (to be done by the Incubator PMC chair or an Incubator PMC Member wih karma for the authorizations file)
DONE Tell Mentors to track progress in the file 'incubator/projects/shiro.html'
date item
DONE Check and make sure that the papers that transfer rights to the ASF been received. It is only necessary to transfer rights for the package, the core code, and any new code produced by the project.
DONE Check and make sure that the files that have been donated have been updated to reflect the new ASF copyright.

Verify distribution rights

date item
N/A Check and make sure that for all code included with the distribution that is not under the Apache license, we have the right to combine with Apache-licensed code and redistribute.
2010-05-25 Check and make sure that all source code distributed by the project is covered by one or more of the following approved licenses: Apache, BSD, Artistic, MIT/X, MIT/W3C, MPL 1.1, or something with essentially the same terms.

Establish a list of active committers

date item
2009-09-18 Check that all active committers have submitted a contributors agreement.
2010-07-13 Add all active committers in the STATUS file.
2008-06-16 Ask root for the creation of committers' accounts on


date item
2008-06-19 Ask infrastructure to create source repository modules and grant the committers karma.
2008-06-11 Ask infrastructure to set up and archive Mailing lists.
2008-06-02 Decide about and then ask infrastructure to setup an issuetracking system (Bugzilla, Scarab, Jira).
DONE Migrate the project to our infrastructure.


These action items have to be checked for during the whole incubation process.

These items are not to be signed as done during incubation, as they may change during incubation. They are to be looked into and described in the status reports and completed in the request for incubation signoff.

Collaborative Development

  • Have all of the active long-term volunteers been identified and acknowledged as committers on the project?


  • Are there three or more independent committers? (The legal definition of independent is long and boring, but basically it means that there is no binding relationship between the individuals, such as a shared employer, that is capable of overriding their free will as individuals, directly or indirectly.)


  • Are project decisions being made in public by the committers?


  • Are the decision-making guidelines published and agreed to by all of the committers?


Licensing awareness

  • Are all licensing, trademark, credit issues being taken care of and acknowleged by all committers?



Things to check for before voting the project out.

Organizational acceptance of responsibility for the project

  • Project is graduating to a new PMC. Has the board voted to accept it?

Incubator sign-off

  • Has the Incubator decided that the project has accomplished all of the above tasks?