Review Results

Comment

The only change in this .SRCINFO hunk is a version bump from 0.5.5 to 0.5.6. No sources, checksums, build steps, install scripts, or package metadata affecting trust boundaries were changed in the reviewed diff. Based on this hunk alone, there is no security concern.

@@ -1,6 +1,6 @@
 pkgbase = python-sounddevice
 	pkgdesc = Record and play back sound
-	pkgver = 0.5.5
+	pkgver = 0.5.6
 	pkgrel = 1
 	url = https://python-sounddevice.rtfd.io/
 	arch = any

Comment

The change is a straightforward upstream version bump in .SRCINFO from sounddevice 0.5.5 to 0.5.6, with the source URL remaining on the official PyPI host over HTTPS and the checksum updated accordingly. No new build steps, scripts, patches, binaries, privilege-related metadata, or other suspicious packaging changes are introduced in this diff. Based on the provided hunk alone, this appears low risk.

@@ -9,7 +9,7 @@ pkgbase = python-sounddevice
 	depends = portaudio
 	depends = python-cffi
 	optdepends = python-numpy: to play back and record NumPy arrays
-	source = https://files.pythonhosted.org/packages/source/s/sounddevice/sounddevice-0.5.5.tar.gz
-	b2sums = 25da7f11bb20f115c828bfb4de00c7ced40224126b5da3a08027c0459d40e1300a4747305c25dab480f73db87c9ad6f0982d0af6adf8c3cc4d5de2e0e9ffaaff
+	source = https://files.pythonhosted.org/packages/source/s/sounddevice/sounddevice-0.5.6.tar.gz
+	b2sums = 0a1becc9729e41cc7acd268ba35ef857390f04348e9e48fa3f14f547f9926b7c4731e1063ed33cc054518ed3e7d83099e663efb7b76cf475046e53fcdd0858cb
 
 pkgname = python-sounddevice

Comment

The change is a simple version bump in PKGBUILD from 0.5.5 to 0.5.6 with no accompanying changes to sources, build steps, install scripts, or package metadata. Based on the provided diff hunk alone, there are no security red flags such as new network fetches, privilege changes, suspicious dependencies, or altered install behavior.

@@ -3,7 +3,7 @@
 # Contributor: Håvard Pettersson <mail@haavard.me>
 
 pkgname=python-sounddevice
-pkgver=0.5.5
+pkgver=0.5.6
 pkgrel=1
 pkgdesc='Record and play back sound'
 url='https://python-sounddevice.rtfd.io/'

Comment

The change is a straightforward version bump from 0.5.5 to 0.5.6 with an updated BLAKE2 checksum for the upstream tarball. The source remains an HTTPS URL on files.pythonhosted.org, there are no new build steps, no added scripts, no network access during build, and no packaging/persistence red flags in the diff. Based on the reviewed hunk alone, this looks low risk.

@@ -13,7 +13,7 @@ depends=(portaudio python-cffi)
 makedepends=(python-setuptools)
 optdepends=('python-numpy: to play back and record NumPy arrays')
 source=("https://files.pythonhosted.org/packages/source/s/sounddevice/sounddevice-$pkgver.tar.gz")
-b2sums=('25da7f11bb20f115c828bfb4de00c7ced40224126b5da3a08027c0459d40e1300a4747305c25dab480f73db87c9ad6f0982d0af6adf8c3cc4d5de2e0e9ffaaff')
+b2sums=('0a1becc9729e41cc7acd268ba35ef857390f04348e9e48fa3f14f547f9926b7c4731e1063ed33cc054518ed3e7d83099e663efb7b76cf475046e53fcdd0858cb')
 
 package() {
   cd sounddevice-$pkgver