Review Results

Comment

The change is limited to .SRCINFO metadata and does not introduce any executable code, install script, or source fetch changes. It updates the package description, bumps pkgrel, and adds several runtime dependencies/optdepends that are plausible for a desktop launcher (NSS/NSPR, ALSA, CUPS, AT-SPI, Python, glibc, zlib). The source remains an HTTPS GitHub release URL pinned to v2.22.2 with an unchanged checksum. No obvious supply-chain, persistence, or privilege-escalation risk is introduced by this metadata-only diff.

@@ -1,16 +1,27 @@
 pkgbase = heroic-games-launcher-bin
-	pkgdesc = An Open source Launcher for Epic, Amazon and GOG Games
+	pkgdesc = An Open Source Launcher for GOG, Epic Games and Amazon Games
 	pkgver = 2.22.2
-	pkgrel = 1
+	pkgrel = 2
 	url = https://heroicgameslauncher.com/
 	arch = x86_64
 	license = GPL-3.0-only
 	depends = which
 	depends = gtk3
+	depends = nss
+	depends = alsa-lib
+	depends = libcups
+	depends = nspr
+	depends = at-spi2-core
+	depends = python
+	depends = libgcc
+	depends = glibc
+	depends = zlib-ng-compat
+	optdepends = gamemode
+	optdepends = gamescope
+	optdepends = mangohud
 	provides = heroic-games-launcher
 	conflicts = heroic-games-launcher
 	noextract = Heroic-2.22.2-linux-x64.pacman
-	options = !strip
 	source = https://github.com/Heroic-Games-Launcher/HeroicGamesLauncher/releases/download/v2.22.2/Heroic-2.22.2-linux-x64.pacman
 	sha256sums = 4e4033ac70b8c407eaf70ce072e4e4d017200f07a3e88f7cfd4d3a597f3c09b8
 

Comment

The change is low risk. It only refactors the PKGBUILD to use pkgver-based source/noextract paths, updates pkgrel, expands runtime dependencies, and changes the tar invocation to equivalent explicit flags. The source remains the official GitHub release over HTTPS with a pinned versioned asset and a verified sha256 checksum. I do not see any new build-time network access, privilege escalation, install-script behavior, or suspicious packaging actions in this diff.

@@ -1,30 +1,44 @@
 # Maintainer: flaviofearn <heroicgameslauncher@protonmail.com>
 # Maintainer: CommandMC <kate@commandmc.de>
 
-pkgname=heroic-games-launcher-bin
 pkgver=2.22.2
-pkgrel=1
-pkgdesc="An Open source Launcher for Epic, Amazon and GOG Games"
+pkgrel=2
+sha256sums=('4e4033ac70b8c407eaf70ce072e4e4d017200f07a3e88f7cfd4d3a597f3c09b8')
+
+pkgname=heroic-games-launcher-bin
+pkgdesc="An Open Source Launcher for GOG, Epic Games and Amazon Games"
 arch=('x86_64')
 url="https://heroicgameslauncher.com/"
 license=('GPL-3.0-only')
-_filename=Heroic-2.22.2-linux-x64.pacman
-source=("https://github.com/Heroic-Games-Launcher/HeroicGamesLauncher/releases/download/v2.22.2/Heroic-2.22.2-linux-x64.pacman")
-noextract=("Heroic-2.22.2-linux-x64.pacman")
-sha256sums=(4e4033ac70b8c407eaf70ce072e4e4d017200f07a3e88f7cfd4d3a597f3c09b8)
-options=(!strip)
+source=("https://github.com/Heroic-Games-Launcher/HeroicGamesLauncher/releases/download/v${pkgver}/Heroic-${pkgver}-linux-x64.pacman")
+noextract=("${source[@]##*/}")
 depends=(
-  which
-  gtk3
+  "which"
+
+  # Electron dependencies
+  "gtk3"
+  "nss"
+  "alsa-lib"
+  "libcups"
+  "nspr"
+  "at-spi2-core"
+
+  # Required by some helper binaries
+  "python"
+  "libgcc"
+  "glibc"
+  "zlib-ng-compat"
+)
+optdepends=(
+  "gamemode"
+  "gamescope"
+  "mangohud"
 )
 provides=(heroic-games-launcher)
 conflicts=(heroic-games-launcher)
 
 package() {
-  tar -xJv -C "$pkgdir" -f "$srcdir/$_filename" usr opt
+  tar --extract --xz --directory="$pkgdir" --file="$srcdir/Heroic-${pkgver}-linux-x64.pacman" usr opt
   mkdir "$pkgdir/usr/bin"
   ln -s "/opt/Heroic/heroic" "$pkgdir/usr/bin/heroic"
 }
-
-# vim:set ts=2 sw=2 et: syntax=sh
-