Split into a core package that depends only on shiro-core and a servlet package that depends on shiro-web