source=("${pkgname}-${pkgver}.tar.gz"::"http://dl.clonehero.net/clonehero-v.23.2.2/clonehero-linux.tar.gz"
Renaming the source to be unique is a good step.
Another good step is not hardcoding "v.23.2.2"; instead, use this to remove the first 0. component of the pkgver:
source=("${pkgname}-${pkgver}.tar.gz"::"http://dl.clonehero.net/clonehero-v.${pkgver#*.}/clonehero-linux.tar.gz"
(maybe the developers should add the 0 to the download name anyway, then again do you think you can get them to change...)
]]>However what I suppose you should do regardless is to rename the downloaded tar.xz and append the version string, see the warning in: https://wiki.archlinux.org/index.php/PKGBUILD#source for the reason why and the proper resolution of this.
]]>