Please put Apache Shiro into the Tier 1 list

[lprimak]

Hi,

Can you please put Apache Shiro in a Tier 1 list?

Apache Wicket and Apache Struts are Tier 1, and Apache Shiro as widely used as them (maybe more),
and has more GitHub stars that either of those frameworks.
Since Shiro is a security framework itself, bugs in it would have a bigger impact.

Apache Shiro is a widely-used Java Application Security framework.

• 15 years old
• 4,400+ stars
• Widely used Java dependency
• CVEs tend to be high impact (path traversal, authentication bypass)
• Many security reports and CVEs already processed

Thank you