Hi i was checking if heroic got to main repo recently and have stun on this

Package Details: heroic-games-launcher-bun 2.22.4-1 (…)
Hello,

Without even checking what the PKGBUILD does, it breaks the submission guidelines in two ways: 1) It’s a binary distribution, which should be bearing the “-bin” suffix. It does not (it’s “-bun”).
 2) It duplicates another PKGBUILD (heroic-games-launcher-bin).

I believe these formalities alone are sufficient to remove the entry without seeking further evidence or noticing that it looks like a typosquatting attempt.

Of course further investigation may be needed to tell user’s fate. IMO they certainly should get under observation.

Thanks for spotting!

Reply via email to