shib IdP size

[Brent Putman]

On 5/30/12 2:25 PM, Kevin P. Foote wrote:
> -> 
> -> There's no useful place to draw the line. You'd almost certainly have to
> -> include the XML layer if you're talking security relevance, and that's all
> -> ASF code.

Yeah, as is also said about software written without a clear
specification: without further clarification of what the intent and
scope is, no number we can come up with will be "wrong", merely
"surprising". 

A simple line count (wc -l) of "our" Java code in the IdP (and just the
.java files) produces this:

java-opensaml2
  124689 total
java-openws
   41672 total
java-xmltooling
   70200 total

java-shib-common
   45529 total
java-shib-idp2
   16359 total

That's roughly 300K.  As you can see, the OpenSAML stack dwarfs the
actual Shib code.  And these numbers include Javadoc/comments, blank
lines, etc.  In other words, probably not what they actually want....

Apache xmlsec is also large:

../../Eclipse/shib2WS/ApacheSantuario/
   79788 total


I don't have Xerces/Xalan checked out, I'm sure they are quite large as
well.  And then there's the other zillion library dependencies of the
IdP (many of which we only use a small portion of, so what "counts"?). 
Where does one draw the line?