Review Results

Comment

The change is a simple version bump in .SRCINFO from 1.8.8 to 1.8.9 with no other metadata changes. By itself this does not introduce any new sources, build steps, install scripts, or privilege/persistence mechanisms. The only minor concern visible in the snippet is that the package URL still uses HTTP, but that is pre-existing and unchanged in this diff. No security issue is introduced by this change.

@@ -1,6 +1,6 @@
 pkgbase = epson-inkjet-printer-escpr
 	pkgdesc = Epson Inkjet Printer Driver (ESC/P-R) for Linux
-	pkgver = 1.8.8
+	pkgver = 1.8.9
 	pkgrel = 1
 	url = http://support.epson.net/linux/Printer/LSB_distribution_pages/en/escpr.php
 	arch = x86_64

Comment

The change only updates the upstream Epson source RPM URL from 1.8.8 to 1.8.9 and refreshes the sha512 checksum accordingly. The source remains on the official Epson download center over HTTPS, with no new build-time code execution, no added scripts, and no packaging/persistence changes visible in this diff. This is a routine version bump with low security risk.

@@ -8,7 +8,7 @@ pkgbase = epson-inkjet-printer-escpr
 	license = GPL-2.0-or-later
 	depends = cups
 	depends = ghostscript
-	source = https://download-center.epson.com/f/module/e934c1f6-0fc1-43e5-8d3e-0de8f3a3d357/epson-inkjet-printer-escpr-1.8.8-1.src.rpm
-	sha512sums = 85bcaff840fe4dfb256b42e5625e221ad273881b7bbeefafc53cff96ab4ddb91e0045fdfcdcf9e53a469385ec524077bfc40051429fba205b659c95741168a51
+	source = https://download-center.epson.com/f/module/8fbe3731-bcfd-4bab-bf48-533c05cc64d4/epson-inkjet-printer-escpr-1.8.9-1.src.rpm
+	sha512sums = d8f765c97402ba43b9d2bd6be1bcf1a673edfb34916334d8c1f55a84315aa7cf58e0aeaf1816c29b79fa833cf9f334c08b9335d0438823ca11d8dd73ee41a53d
 
 pkgname = epson-inkjet-printer-escpr

Comment

The change is a straightforward version bump in PKGBUILD from 1.8.8 to 1.8.9, with the source URL and sha512 checksum updated accordingly. The source remains an HTTPS Epson download-center RPM, there are no new build-time network fetches, no added scripts, no privilege escalation, and no packaging/install logic changes. The only minor concern is that the package still uses Epson's HTTP homepage in url=, but that predates this change and is not introduced here. Overall this diff does not add security risk.

@@ -10,15 +10,15 @@
 # Contributor: MetaNova
 
 pkgname=epson-inkjet-printer-escpr
-pkgver=1.8.8
+pkgver=1.8.9
 pkgrel=1
 pkgdesc='Epson Inkjet Printer Driver (ESC/P-R) for Linux'
 arch=('x86_64' 'aarch64')
 url='http://support.epson.net/linux/Printer/LSB_distribution_pages/en/escpr.php'
 license=('GPL-2.0-or-later')
 depends=('cups' 'ghostscript')
-source=('https://download-center.epson.com/f/module/e934c1f6-0fc1-43e5-8d3e-0de8f3a3d357/epson-inkjet-printer-escpr-1.8.8-1.src.rpm')
-sha512sums=('85bcaff840fe4dfb256b42e5625e221ad273881b7bbeefafc53cff96ab4ddb91e0045fdfcdcf9e53a469385ec524077bfc40051429fba205b659c95741168a51')
+source=('https://download-center.epson.com/f/module/8fbe3731-bcfd-4bab-bf48-533c05cc64d4/epson-inkjet-printer-escpr-1.8.9-1.src.rpm')
+sha512sums=('d8f765c97402ba43b9d2bd6be1bcf1a673edfb34916334d8c1f55a84315aa7cf58e0aeaf1816c29b79fa833cf9f334c08b9335d0438823ca11d8dd73ee41a53d')
 DLAGENTS=('https::/usr/bin/curl --user-agent Firefox -qgb "" -fLC - --retry 3 --retry-delay 3 -o %o %u')