apache / shiro - Conditional Complexity

Intro

Conditional complexity (also called cyclomatic complexity) is a term used to measure the complexity of software. The term refers to the number of possible paths through a program function. A higher value ofter means higher maintenance and testing costs (infosecinstitute.com).
Conditional complexity is calculated by counting all conditions in the program that can affect the execution path (e.g. if statement, loops, switches, and/or operators, try and catch blocks...).
Conditional complexity is measured at the unit level (methods, functions...).
Units are classified in four categories based on the measured McCabe index: 1-5 (simple units), 6-10 (medium complex units), 11-25 (complex units), 26+ (very complex units).

Learn more...

Conditional Complexity Overall

There are 3,047 units with 19,294 lines of code in units (68.4% of code).

0 very complex units (0 lines of code)
3 complex units (356 lines of code)
13 medium complex units (454 lines of code)
112 simple units (2,591 lines of code)
2,919 very simple units (15,893 lines of code)

Legend:

51+

26-50

11-25

6-10

1-5

Alternative Visuals

3D view of all units

Conditional Complexity per Extension

51+

26-50

11-25

6-10

1-5

Conditional Complexity per Logical Component

primary logical decomposition

51+

26-50

11-25

6-10

1-5

Most Complex Units

Top 50 most complex units

Unit	# lines	McCabe index	# params
protected boolean doMatch() in core/src/main/java/org/apache/shiro/util/AntPathMatcher.java	103	37	3
public static void main() in tools/hasher/src/main/java/org/apache/shiro/tools/hasher/Hasher.java	146	36	1
private boolean matchStrings() in core/src/main/java/org/apache/shiro/util/AntPathMatcher.java	107	35	2
public RemoteInvocation createRemoteInvocation() in support/spring/src/main/java/org/apache/shiro/spring/remoting/SecureRemoteInvocationFactory.java	50	15	1
private static String normalize() in web/src/main/java/org/apache/shiro/web/util/WebUtils.java	41	13	2
private boolean doIsEncodeable() in web/src/main/java/org/apache/shiro/web/servlet/ShiroHttpServletResponse.java	45	13	3
public void disableSessionValidation() in support/quartz/src/main/java/org/apache/shiro/session/mgt/quartz/QuartzSessionValidationScheduler.java	46	12	0
public void merge() in core/src/main/java/org/apache/shiro/authc/SimpleAuthenticationInfo.java	36	12	1
protected boolean onEquals() in core/src/main/java/org/apache/shiro/session/mgt/SimpleSession.java	10	12	1
protected AuthenticationInfo doGetAuthenticationInfo() in core/src/main/java/org/apache/shiro/realm/jdbc/JdbcRealm.java	51	12	1
protected Class getHashFormatClass() in crypto/hash/src/main/java/org/apache/shiro/crypto/hash/format/DefaultHashFormatFactory.java	32	11	1
protected void mergePrincipals() in core/src/main/java/org/apache/shiro/mgt/DefaultSubjectDAO.java	34	11	1
protected void validateAuthenticationInfo() in core/src/main/java/org/apache/shiro/realm/ldap/JndiLdapContextFactory.java	16	11	1
protected AuthorizationInfo getAuthorizationInfo() in core/src/main/java/org/apache/shiro/realm/AuthorizingRealm.java	35	11	1
private Serializable getReferencedSessionId() in web/src/main/java/org/apache/shiro/web/session/mgt/DefaultWebSessionManager.java	30	11	2
public HttpSession getSession() in web/src/main/java/org/apache/shiro/web/servlet/ShiroHttpServletRequest.java	28	11	1
protected Map toMap() in config/ogdl/src/main/java/org/apache/shiro/config/ogdl/ReflectionBuilder.java	31	10	1
protected void applyProperty() in config/ogdl/src/main/java/org/apache/shiro/config/ogdl/ReflectionBuilder.java	28	10	3
public Object invoke() in support/spring/src/main/java/org/apache/shiro/spring/remoting/SecureRemoteInvocationExecutor.java	41	10	2
public void validateSessions() in core/src/main/java/org/apache/shiro/session/mgt/AbstractValidatingSessionManager.java	32	10	0
public void logout() in core/src/main/java/org/apache/shiro/mgt/DefaultSecurityManager.java	34	10	1
public LdapContext getLdapContext() in core/src/main/java/org/apache/shiro/realm/ldap/JndiLdapContextFactory.java	28	10	2
private String toAbsolute() in web/src/main/java/org/apache/shiro/web/servlet/ShiroHttpServletResponse.java	34	10	1
private static ByteSource getSalt() in tools/hasher/src/main/java/org/apache/shiro/tools/hasher/Hasher.java	32	9	4
protected void applyProperty() in config/ogdl/src/main/java/org/apache/shiro/config/ogdl/ReflectionBuilder.java	48	9	3
protected void doEncodeAll() in support/jakarta-ee/src/main/java/org/apache/shiro/ee/faces/tags/PrincipalTag.java	32	9	1
private static AuthorizingAnnotationHandler createHandler() in support/jaxrs/src/main/java/org/apache/shiro/web/jaxrs/AnnotationAuthorizationFilter.java	22	9	1
public int compare() in event/src/main/java/org/apache/shiro/event/support/EventListenerComparator.java	29	9	2
public static ByteSource bytes() in lang/src/main/java/org/apache/shiro/lang/util/ByteSource.java	28	9	1
public static InputStream getResourceAsStream() in lang/src/main/java/org/apache/shiro/lang/util/ClassUtils.java	29	9	1
public static Class forName() in lang/src/main/java/org/apache/shiro/lang/util/ClassUtils.java	33	9	1
public static String join() in lang/src/main/java/org/apache/shiro/lang/util/StringUtils.java	28	9	2
public final AuthenticationInfo authenticate() in core/src/main/java/org/apache/shiro/authc/AbstractAuthenticator.java	42	9	1
private void writeObject() in core/src/main/java/org/apache/shiro/session/mgt/SimpleSession.java	29	9	1
private void readObject() in core/src/main/java/org/apache/shiro/session/mgt/SimpleSession.java	28	9	1
private short getAlteredFieldsBitMask() in core/src/main/java/org/apache/shiro/session/mgt/SimpleSession.java	12	9	0
protected void onInit() in core/src/main/java/org/apache/shiro/realm/text/IniRealm.java	32	9	0
protected Set getRoleNamesForUser() in core/src/main/java/org/apache/shiro/realm/activedirectory/ActiveDirectoryRealm.java	35	9	2
protected boolean isAccessAllowed() in web/src/main/java/org/apache/shiro/web/filter/authz/IpFilter.java	26	9	3
public boolean equals() in crypto/support/hashes/argon2/src/main/java/org/apache/shiro/crypto/support/hashes/argon2/Argon2Hash.java	14	8	1
static String resubmitSavedForm() in support/jakarta-ee/src/main/java/org/apache/shiro/ee/filters/FormResubmitSupport.java	43	8	6
private String getPrincipalProperty() in support/jakarta-ee/src/main/java/org/apache/shiro/ee/faces/tags/PrincipalTag.java	37	8	2
public void hear() in support/guice/src/main/java/org/apache/shiro/guice/BeanTypeListener.java	30	8	2
public int compare() in event/src/main/java/org/apache/shiro/event/support/EventClassComparator.java	21	8	2
public String extractPathWithinPattern() in core/src/main/java/org/apache/shiro/util/AntPathMatcher.java	19	8	2
public void assertAuthorized() in core/src/main/java/org/apache/shiro/authz/aop/RoleAnnotationHandler.java	26	8	1
public void assertAuthorized() in core/src/main/java/org/apache/shiro/authz/aop/PermissionAnnotationHandler.java	28	8	1
public boolean implies() in core/src/main/java/org/apache/shiro/authz/permission/WildcardPermission.java	26	8	1
protected String getUserDn() in core/src/main/java/org/apache/shiro/realm/ldap/DefaultLdapRealm.java	24	8	1
protected void processUserDefinitions() in core/src/main/java/org/apache/shiro/realm/text/TextConfigurationRealm.java	29	8	1