Review Results

Comment

The change only removes two optdepends entries from .SRCINFO: lib32-openal and lib32-speex. This does not introduce any new code execution, network access, privilege escalation, or packaging integrity risk. It slightly reduces advertised optional dependencies, which may affect functionality for some users but is not a security concern.

@@ -16,11 +16,9 @@ pkgbase = proton-ge-custom-bin
 	license = custom
 	depends = python
 	optdepends = vulkan-icd-loader
-	optdepends = lib32-openal
 	optdepends = lib32-vkd3d
 	optdepends = lib32-vulkan-icd-loader: dxvk dependency for 32bit prefixes
 	optdepends = lib32-libva
-	optdepends = lib32-speex
 	optdepends = lib32-libtheora
 	optdepends = lib32-libvdpau
 	optdepends = gst-plugins-bad-libs

Comment

The change only removes two optional 32-bit audio codec/runtime dependencies from optdepends in PKGBUILD. It does not add code execution, network access, privilege escalation, new sources, or packaging behavior changes. This is a low-risk metadata-only adjustment that may reduce functionality for users who rely on those optional components, but it does not introduce a security issue.

@@ -20,12 +20,10 @@ conflicts=('proton-ge-custom' 'proton-ge-bin')
 depends=('python')
 optdepends=(
   'vulkan-icd-loader'
-  'lib32-openal'
   'lib32-vkd3d'
   'lib32-vulkan-icd-loader: dxvk dependency for 32bit prefixes'
   # libav support #
   'lib32-libva'
-  'lib32-speex'
   'lib32-libtheora'
   'lib32-libvdpau'
   # gstreamer support #