Is shiro still a good choice (JSF+CDI-JAX-WS ejb)

[kirys.it]

Hi all
I'm searching for a security framework for a personal project based on 
JEE6 (JSF + CDI
 + EJB and Jax-ws for the rest parts)
Shiro seemed a good candidate ( social with 
https://github.com/bujiio/buji-pac4j ) but lack of official support for 
the stack and lack of updates ( is this the official repo? 
https://github.com/apache/shiro/blob/trunk/ ) make me think that maybe i 
should look else were.
What You think
K.