11
I Use This!
Very High Activity
Analyzed 1 day ago. based on code collected 2 days ago.

Project Summary

HarfBuzz is an OpenType text shaping engine.

Tags

development font fonts i18n internationalization layout library opentype otf truetype ttf typesetting typography unicode

Quick Reference

MIT License
Permitted

Commercial Use

Modify

Distribute

Sub-License

Private Use

Forbidden

Hold Liable

Required

Include Copyright

Include License

These details are provided for information only. No information here is legal advice and should not be used as such.

Project Security

Vulnerabilities per Version ( last 10 releases )

There are no reported vulnerabilities

Project Vulnerability Report

Security Confidence Index

Poor security track-record
Favorable security track-record

Vulnerability Exposure Index

Many reported vulnerabilities
Few reported vulnerabilities

Did You Know...

  • ...
    65% of companies leverage OSS to speed application development in 2016
  • ...
    compare projects before you chose one to use
  • ...
    there are over 3,000 projects on the Open Hub with security vulnerabilities reported against them
  • ...
    search using multiple tags to find exactly what you need
About Project Security

Languages

C++
78%
C
13%
9 Other
9%

30 Day Summary

Sep 20 2026 — Oct 20 2026

12 Month Summary

Oct 20 2025 — Oct 20 2026
  • 2451 Commits
    Up + 353 (16%) from previous 12 months
  • 60 Contributors
    Up + 19 (46%) from previous 12 months

Static Analysis ( Generated by Coverity Scan for HarfBuzz )

Repository URL: https://github.com/harfbuzz/harfbuzz

Version: trunk

2026-10-21
Last Analyzed
236,156
Lines of Code Analyze
0.39
Defect Density

Defects by status for current build

251
Total defects
91
Outstanding
155
Fixed

CWE Top 25 defects

ID CWE-Name Number of Defects
190 Integer Overflow or Wraparound 16