pkg.sopackage field notes

brew / rank 13

Install harfbuzz with Homebrew

OpenType text shaping engine. Version 14.3.0 via Homebrew; verified 2026-07-31.

install

Additional install commands

macOS

Homebrewverified · 100%
brew install harfbuzz

provider-native install command

overview

Package summary

OpenType text shaping engine

Commands and aliases

  • hb-info
  • hb-raster
  • hb-shape
  • hb-subset
  • hb-vector
  • hb-view

history

Project history and usage

HarfBuzz is an open source text shaping engine and font platform. It converts Unicode text plus font data into positioned glyphs, which makes it a quiet but critical dependency for readable Arabic, Indic, Southeast Asian, and many other complex-script layouts.

For package users, HarfBuzz is the kind of library that disappears when it works and becomes instantly visible when it regresses: browsers, GUI toolkits, document editors, terminals, and font tools depend on consistent shaping behavior.

Project history

The HarfBuzz manual says the project began as text-shaping code inside FreeType and was extracted into its own project. Behdad Esfahbod's text-rendering history explains that FreeType's OpenType Layout code was removed from FreeType's rasterization scope, then carried separately by Pango and Qt developers.

Around 2006, Pango and Qt developers cooperated to reunify the layout engine as a freedesktop.org project named HarfBuzz. The same history notes that HarfBuzz was relicensed to the old MIT license and that the plan became a unified shaping engine rather than only a merged copy of existing code.

The project's own README says HarfBuzz started as a text shaping engine and grew into a broader font platform supporting OpenType and Apple Advanced Typography. Its component map includes core shaping, subsetting, font-function integrations with FreeType/CoreText/Uniscribe/DirectWrite/GDI/GLib/Graphite2, and CLI tools such as `hb-shape`, `hb-view`, and `hb-subset`.

Adoption history

HarfBuzz adoption followed the need for shared, correct complex-script shaping across open source desktops, browsers, toolkits, and document stacks. The README states that HarfBuzz shapes the majority of text on modern screens, which reflects its position below many user-facing applications.

Because shaping quality depends on Unicode, OpenType, AAT, Graphite, script-specific rules, and font quirks, HarfBuzz became a shared place for correctness and robustness work that individual applications would struggle to maintain independently.

Its wide package-manager presence in the supplied input facts reflects this dependency role: HarfBuzz is not just a command-line tool package, it is a library package that other packages build against.

How it is used

Most users consume HarfBuzz indirectly through libraries and applications. Direct users call its C API or C++ implementation to feed buffers, fonts, features, scripts, languages, and directions, then receive glyph IDs and positions for rendering.

The package also ships command-line utilities useful to font engineers and package maintainers. Tools such as `hb-shape`, `hb-view`, `hb-info`, and `hb-subset` help reproduce shaping behavior, inspect font support, render examples, and create smaller font subsets.

Why package nerds care

HarfBuzz is package-nerd significant because it sits in the dependency graph of text rendering. A version bump can change glyph placement, script behavior, subset output, sanitizer strictness, ABI exposure, or optional backend integration.

It is also a classic example of a small-looking package with enormous blast radius. Packaging choices around FreeType, Graphite2, GLib, CoreText, DirectWrite, ICU-like Unicode data, build flags, and command-line utilities affect everything from web browsers to PDF producers.

The project's release history shows why maintainers track it closely: HarfBuzz 1.0 implemented the Universal Shaping Engine, 2.0 added AAT shaping support, 3.0 stabilized the subset API and ABI, and 8.0 introduced an experimental WebAssembly shaper.

Timeline

  • Pre-2006: OpenType layout code originates in FreeType and is carried by Pango and Qt after extraction from FreeType's rasterizer scope.
  • 2006: Pango and Qt developers cooperate to reunify the layout engine as HarfBuzz under freedesktop.org.
  • 2008: Behdad Esfahbod describes rewrite work aimed at robustness and efficient mmap-based font use.
  • 2015-07-26: HarfBuzz 1.0.0 release notes list Universal Shaping Engine implementation.
  • 2018-10-18: HarfBuzz 2.0.0 release notes list AAT shaping support.
  • 2021-09-17: HarfBuzz 3.0.0 release notes declare the subset API and harfbuzz-subset ABI stable.
  • 2023-07-09: HarfBuzz 8.0.0 release notes introduce an experimental WebAssembly shaper.

Related projects

  • Closely related projects include FreeType, Pango, Qt, Cairo, Skia, Graphite2, CoreText, Uniscribe, DirectWrite, fontconfig, and the OpenType and Unicode specifications.
  • HarfBuzz also relates to browser engines, PDF and office suites, TeX engines, font subsetting pipelines, and font engineering tools that need reproducible shaping.

security posture

Risk level: green

narrow executable package without higher-risk signals.

Risk classifier

green risk · low confidence · appliance

Why

  • narrow executable package without higher-risk signals

Signals

  • metadata:no-higher-risk-signals

Install behavior

  • No Homebrew bottle metadata was recorded.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

executables

Installed executables

CommandKindExposureNote
hb-infoexecutableindexed executableDiscovered from the local executable index.
hb-rasterexecutableindexed executableDiscovered from the local executable index.
hb-shapeexecutableindexed executableDiscovered from the local executable index.
hb-subsetexecutableindexed executableDiscovered from the local executable index.
hb-vectorexecutableindexed executableDiscovered from the local executable index.
hb-viewexecutableindexed executableDiscovered from the local executable index.

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-08-03
manager version14.3.0
manager updated2026-07-31
local dataunknown
upstreamnot available
latest detectednot detected
  • okNo freshness warnings were generated.

install metadata

Package metadata

Package keybrew:harfbuzz
Version14.3.0
Package managerHomebrew
Homepagehttps://github.com/harfbuzz/harfbuzz
Repositoryhttps://github.com/harfbuzz/harfbuzz
Last updated2026-07-31T21:49:06Z
Pulseupdated
Bottlenot recorded
Servicenone declared

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Used sources

  • Geiger risk classifier
  • Nucleus package database
  • curated package history
  • pkgdb category and tag curation