Review Results

Comment

The only change in this .SRCINFO hunk is a version bump from 2.1.6 to 2.1.7. No source URLs, checksums, build steps, install scripts, permissions, or package metadata affecting trust boundaries were modified in the reviewed diff. Based on this hunk alone, there is no security-relevant change.

@@ -1,6 +1,6 @@
 pkgbase = droidcam
 	pkgdesc = A tool to turn your phone/tablet into a wireless/usb webcam
-	pkgver = 2.1.6
+	pkgver = 2.1.7
 	pkgrel = 1
 	epoch = 1
 	url = https://github.com/dev47apps/droidcam-linux-client

Comment

The change is a straightforward version bump in .SRCINFO from droidcam 2.1.6 to 2.1.7 with the corresponding source tarball checksum update. The source remains an HTTPS GitHub release archive from the upstream project, and no new build steps, scripts, or dependencies are introduced by this diff. Based on the provided hunk alone, there are no security red flags such as network fetches at build time, suspicious URLs, or packaging changes that would affect privilege or persistence behavior.

@@ -15,10 +15,10 @@ pkgbase = droidcam
 	makedepends = speex
 	optdepends = android-tools: for Android USB connection
 	optdepends = usbmuxd: for iOS USB connection
-	source = droidcam-2.1.6.tar.gz::https://github.com/dev47apps/droidcam-linux-client/archive/v2.1.6.tar.gz
+	source = droidcam-2.1.7.tar.gz::https://github.com/dev47apps/droidcam-linux-client/archive/v2.1.7.tar.gz
 	source = dkms.conf
 	source = droidcam.conf
-	sha256sums = 2850f52d1d779e037f833fdf68518c31a88981d0897743ebdb9a2c8492e8033f
+	sha256sums = 77f40eae703ab91e65d81959521b600a2b11e508fc295efd5986f08c1acd1cdb
 	sha256sums = 20de9d14877732f2f75c21bdd4c335c71dcaeccab4ce348c6c0a210f622ceed2
 	sha256sums = 1d4b3ff98b4af9de77a24d1b6fad6e004deadf1f157eb800aa878ba1e7693dac
 

Comment

The change is a routine version bump from 2.1.6 to 2.1.7 with the corresponding source checksum update. The source is still fetched over HTTPS from the upstream GitHub archive, and there are no new build steps, scripts, patches, or packaging changes introduced by this diff. No security-relevant red flags are present in the reviewed hunk.

@@ -7,7 +7,7 @@
 pkgbase=droidcam
 pkgname=(droidcam v4l2loopback-dc-dkms)
 _name=droidcam-linux-client
-pkgver=2.1.6
+pkgver=2.1.7
 pkgrel=1
 epoch=1
 pkgdesc="A tool to turn your phone/tablet into a wireless/usb webcam"

Comment

The change only updates PKGBUILD to the new upstream release tarball and its sha256 checksum. No build logic, install scripts, permissions, dependencies, or packaging behavior changed. The source remains an HTTPS GitHub archive pinned to a version tag, and there are no new red flags such as network fetches in build(), embedded binaries, or privilege-related changes. Risk is minimal and limited to normal upstream version bump integrity verification.

@@ -20,7 +20,7 @@ optdepends=('android-tools: for Android USB connection'
 source=("${pkgbase}-${pkgver}.tar.gz::${url}/archive/v${pkgver}.tar.gz"
         "dkms.conf"
         "${pkgbase}.conf")
-sha256sums=('2850f52d1d779e037f833fdf68518c31a88981d0897743ebdb9a2c8492e8033f'
+sha256sums=('77f40eae703ab91e65d81959521b600a2b11e508fc295efd5986f08c1acd1cdb'
             '20de9d14877732f2f75c21bdd4c335c71dcaeccab4ce348c6c0a210f622ceed2'
             '1d4b3ff98b4af9de77a24d1b6fad6e004deadf1f157eb800aa878ba1e7693dac')