pkg.sopackage field notes

brew / rank 1038

Install faad2 with Homebrew

ISO AAC audio decoder. Version 2.11.2 via Homebrew; verified from local package data.

install

Additional install commands

macOS

Homebrewverified · 100%
brew install faad2

provider-native install command

overview

Package summary

ISO AAC audio decoder

Commands and aliases

  • faad

history

Project history and usage

FAAD2 is the Freeware Advanced Audio Decoder, a GPL-licensed AAC decoder with both a library and a small command-line frontend.

Project history

The project comes from the early-2000s AAC tooling around FAAC/FAAD. Its README identifies FAAD2 as an HE, LC, MAIN, and LTP profile MPEG-2 and MPEG-4 AAC decoder with SBR support, and the copyright block credits M. Bakker and Nero AG for 2003-2005 code.

Later maintenance has focused less on new user-facing features and more on keeping a mature codec implementation buildable and safe. The changelog records DAB+ support in 2.7, renewed build-system work in the 2.9 and 2.10 series, and a large 2.11.0 cleanup with CMake, Bazel, CI, fuzzers, OSS-Fuzz integration, and many crash or CVE-related decoder fixes.

Adoption history

FAAD2 became a familiar low-level dependency for Unix audio stacks because it provides a standalone AAC decoder library plus the `faad` frontend. Its adoption story is typical of codec packages: quiet, long-lived, and maintained because many media workflows need reliable decoding of older and current AAC files.

How it is used

Users normally encounter FAAD2 as the `faad` command or as libfaad linked by other media software. The source tree explicitly separates the command-line frontend, public include files, API docs, and decoder library, which is why distributions can package both executable and library use cases.

Why package nerds care

FAAD2 matters to package maintainers because it sits at the uncomfortable intersection of old multimedia standards, GPL licensing, patent warnings, and security hardening. The recent changelog entries around fuzzing and CVE fixes are exactly the sort of maintenance that keeps legacy codec packages viable.

Timeline

  • 2003-2005: Core FAAD2 copyright period credited to M. Bakker and Nero AG.
  • 2009: FAAD2 2.7 adds DAB+ support.
  • 2019: FAAD2 2.9.0 includes build cleanup and multiple CVE fixes.
  • 2023: FAAD2 2.11.0 adds CMake, Bazel, CI, fuzzers, and broad decoder hardening.
  • 2025: FAAD2 2.11.2 adds a BUILD_FAAD_CLI option and additional frontend fixes.

Related projects

  • FAAC is the companion AAC encoder project historically distributed from the same SourceForge project area.
  • FAAD2 is commonly compared with other media codec components that provide small command-line frontends over reusable C libraries.

security posture

Risk level: blue

broad file, network, media, or database tool signal.

Risk classifier

blue risk · medium confidence · tool

Why

  • broad file, network, media, or database tool signal

Signals

  • text:audio

Install behavior

  • No Homebrew bottle metadata was recorded.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

executables

Installed executables

CommandKindExposureNote
faadexecutableindexed executableDiscovered from the local executable index.

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-08-03
manager version2.11.2
manager updated
local dataunknown
upstreamnot available
latest detectednot detected
  • okNo freshness warnings were generated.

install metadata

Package metadata

Package keybrew:faad2
Version2.11.2
Package managerHomebrew
Homepagehttps://sourceforge.net/projects/faac/
Repositoryhttps://github.com/knik0/faad2
Bottlenot recorded
Servicenone declared

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Used sources

  • Geiger risk classifier
  • Nucleus package database
  • curated package history
  • pkgdb category and tag curation