Review Results

Comment

The only change in this .SRCINFO hunk is a pkgrel decrement from 2 to 1. This is a metadata/versioning change only; it does not alter sources, build steps, dependencies, install scripts, or shipped artifacts. No security-relevant behavior is introduced by this diff alone.

@@ -1,7 +1,7 @@
 pkgbase = awesome-git
 	pkgdesc = Highly configurable framework window manager
 	pkgver = 4.3.1735.gfa805ab46
-	pkgrel = 2
+	pkgrel = 1
 	url = https://awesomewm.org/
 	arch = i686
 	arch = x86_64

Comment

The change only swaps a dependency from `lua-lgi-git` to `lua-lgi` in `.SRCINFO`. This is a metadata-only dependency adjustment with no evidence of added code execution, network access, privilege changes, or packaging hygiene regressions. It reduces reliance on a VCS package rather than introducing a new source or script, so I see no security issue in this diff alone.

@@ -19,7 +19,7 @@ pkgbase = awesome-git
 	depends = libxdg-basedir
 	depends = libxkbcommon-x11
 	depends = lua
-	depends = lua-lgi-git
+	depends = lua-lgi
 	depends = pango
 	depends = startup-notification
 	depends = xcb-util-cursor

Comment

The change is low risk. It only adjusts package metadata: pkgrel is reset from 2 to 1, and the runtime dependency is switched from the AUR VCS package `lua-lgi-git` to the regular repo package `lua-lgi`. There are no added build steps, no network fetches, no install scripts, and no privilege/persistence mechanisms. The only thing to note is that changing from a VCS dependency to a stable package could alter runtime compatibility if upstream specifically required a newer git snapshot, but that is a packaging correctness concern rather than a security issue.

@@ -10,16 +10,13 @@
 _pkgname=awesome
 pkgname=${_pkgname}-git
 pkgver=4.3.1735.gfa805ab46
-pkgrel=2
+pkgrel=1
 pkgdesc='Highly configurable framework window manager'
 arch=('i686' 'x86_64')
 url='https://awesomewm.org/'
 license=('GPL2')
 depends=('cairo' 'dbus' 'gdk-pixbuf2' 'libxdg-basedir' 'libxkbcommon-x11'
-         'lua'
-		 #'lua-lgi'
-		 'lua-lgi-git'
-		 'pango' 'startup-notification' 'xcb-util-cursor'
+         'lua' 'lua-lgi' 'pango' 'startup-notification' 'xcb-util-cursor'
          'xcb-util-keysyms' 'xcb-util-wm' 'xcb-util-xrm' 'libxfixes')
 makedepends=('asciidoctor' 'cmake' 'docbook-xsl' 'git' 'imagemagick' 'ldoc'
              'xmlto')