The catalogue entries look like string lists, but are parsed with g_key_file_get_string() and only afterwards split along into parts. String lists end with a ';' character, which the current code will make into an empty string, which later leads to an error when the packagekit backend tries to install that "" package. Since it's surprising to the user that these entries are parsed as strings not string lists, the lib should tolerate the string list format and thus skip the empty string parts.

Alternatively, just use g_key_file_get_string_list(); is there any reason that ',' and ' ' are also supported as delimiters?