Review Results

Comment

The change is low risk. It only bumps pkgrel and adjusts the x86_64 source URL from a versioned filename with an extra '-1' suffix to the upstream filename, while keeping the same upstream domain and checksum. There are no new build steps, scripts, privileges, or additional sources introduced in this .SRCINFO diff. The only caveat is that .SRCINFO is metadata and the actual PKGBUILD/source integrity should still be checked elsewhere, but this specific change does not add a security concern.

@@ -1,12 +1,12 @@
 pkgbase = masterpdfeditor
 	pkgdesc = A complete solution for viewing, creating and editing PDF files
 	pkgver = 5.9.99
-	pkgrel = 2
+	pkgrel = 3
 	url = https://code-industry.net/free-pdf-editor/
 	arch = x86_64
 	license = custom
 	makedepends = patchelf
-	source_x86_64 = https://code-industry.net/public/master-pdf-editor-5.9.99-1-qt5.x86_64.tar.gz
+	source_x86_64 = https://code-industry.net/public/master-pdf-editor-5.9.99-qt5.x86_64.tar.gz
 	sha1sums_x86_64 = bf84fca45c8e416f959b9667a21baf45d87e0f39
 
 pkgname = masterpdfeditor

Comment

The change only bumps pkgrel and adjusts the upstream tarball filename from `master-pdf-editor-${pkgver}-1-qt5.x86_64.tar.gz` to `master-pdf-editor-${pkgver}-qt5.x86_64.tar.gz`. This is a packaging/source-location update, not a new code path. The source remains HTTPS on the official upstream domain, and the existing checksum pin still constrains the downloaded artifact. No install script, build logic, or privilege-related behavior is changed in this diff. Low risk.

@@ -6,13 +6,13 @@
 
 pkgname=masterpdfeditor
 pkgver=5.9.99
-pkgrel=2
+pkgrel=3
 pkgdesc='A complete solution for viewing, creating and editing PDF files'
 url='https://code-industry.net/free-pdf-editor/'
 arch=('x86_64')
 license=('custom')
 makedepends=('patchelf')
-source_x86_64=("https://code-industry.net/public/master-pdf-editor-${pkgver}-1-qt5.x86_64.tar.gz")
+source_x86_64=("https://code-industry.net/public/master-pdf-editor-${pkgver}-qt5.x86_64.tar.gz")
 sha1sums_x86_64=('bf84fca45c8e416f959b9667a21baf45d87e0f39')
 
 package() {