# harfbuzz 14.2.1

HarfBuzz text shaping engine

Snapshot of gominimal/pkgs commit `d0c6b61c4eb29c35d22e65979ad1d72ed974c80d` (pushed 2026-07-28T00:45:49.000Z).

## Install

```sh
min add harfbuzz
```

## Direct advisories

None at this commit.

## Transitive advisories

3 advisories inherited through runtime dependencies:

- CVE-2026-40930 (MEDIUM) via freetype → libpng
- GHSA-q7rw-r7qq-2hx6 (UNKNOWN) via glib → pcre2
- OSV-2026-343 (HIGH) via glib → pcre2

## Dependencies

- Build (5): base, meson, ninja, pkgconf, toolchain
- Runtime (3): freetype, glib, glibc

## Scorecard

| Category | Score | Band |
| --- | --- | --- |
| supply-chain | 80 | good |
| advisories | 25 | low |
| quality | 33 | low |
| maintenance | 100 | perfect |
| licence | 90 | good |

## Links

- Homepage: http://harfbuzz.github.io/
- Package page (HTML): https://minimal.dev/pkgs/harfbuzz
- JSON API (floats latest): https://minimal.dev/api/pkgs/harfbuzz.json
- SBOM (CycloneDX 1.5): https://minimal.dev/api/pkgs/harfbuzz/sbom.json