Review Results

Comment

The change is limited to switching the package from a Qt6 build to a Qt5 build and updating the corresponding upstream tarball/checksum in .SRCINFO. The source remains an HTTPS download from the vendor’s official site, there are no new build-time commands, scripts, or privilege-related changes, and no evidence of added persistence or integrity bypass. This looks like a routine packaging update rather than a security-relevant modification.

@@ -1,18 +1,18 @@
 pkgbase = masterpdfeditor
 	pkgdesc = A complete solution for viewing, creating and editing PDF files
 	pkgver = 5.9.99
-	pkgrel = 1
+	pkgrel = 2
 	url = https://code-industry.net/free-pdf-editor/
 	arch = x86_64
 	license = custom
 	makedepends = patchelf
-	source_x86_64 = https://code-industry.net/public/master-pdf-editor-5.9.99-qt6.x86_64.tar.gz
-	sha1sums_x86_64 = bbb128f7f23594d11cabbb7865ea85510f0833db
+	source_x86_64 = https://code-industry.net/public/master-pdf-editor-5.9.99-1-qt5.x86_64.tar.gz
+	sha1sums_x86_64 = bf84fca45c8e416f959b9667a21baf45d87e0f39
 
 pkgname = masterpdfeditor
 	depends = libgl
 	depends = pkcs11-helper
-	depends = qt6-base
-	depends = qt6-svg
-	depends = qt6-declarative
+	depends = qt5-base
+	depends = qt5-svg
+	depends = qt5-declarative
 	depends = sane

Comment

The change is a straightforward repackaging of the upstream binary tarball from a Qt6 build to a Qt5 build, with the source URL and checksum updated accordingly and runtime dependencies adjusted from qt6-* to qt5-*. There are no new build-time downloads, scripts, privilege changes, persistence mechanisms, or suspicious install actions introduced by this diff. The package still ships an upstream prebuilt binary, but that was already the case; this change does not worsen the trust model or add an obvious security issue.

@@ -6,17 +6,17 @@
 
 pkgname=masterpdfeditor
 pkgver=5.9.99
-pkgrel=1
+pkgrel=2
 pkgdesc='A complete solution for viewing, creating and editing PDF files'
 url='https://code-industry.net/free-pdf-editor/'
 arch=('x86_64')
 license=('custom')
 makedepends=('patchelf')
-source_x86_64=("https://code-industry.net/public/master-pdf-editor-${pkgver}-qt6.x86_64.tar.gz")
-sha1sums_x86_64=('bbb128f7f23594d11cabbb7865ea85510f0833db')
+source_x86_64=("https://code-industry.net/public/master-pdf-editor-${pkgver}-1-qt5.x86_64.tar.gz")
+sha1sums_x86_64=('bf84fca45c8e416f959b9667a21baf45d87e0f39')
 
 package() {
-  depends=('libgl' 'pkcs11-helper' 'qt6-base' 'qt6-svg' 'qt6-declarative' 'sane')
+  depends=('libgl' 'pkcs11-helper' 'qt5-base' 'qt5-svg' 'qt5-declarative' 'sane')
 
   install -d "$pkgdir"{/opt/,/usr/bin/}
   cp -a --no-preserve=ownership master-pdf-editor-${pkgver%%.*} "$pkgdir/opt/"