Suspicious Package: cool, free utility looks into .pkg files

Software
1

I just downloaded a totally innocuous app to evaluate, NoteCase Pro, and after macOS gave me the standard warning that it came from an unidentified developer (not a big deal), I also got some pop-ups from a free QuickLook plugin (that I’d forgotten I’d installed) for examining Installer packages - Supicious Package from Randy Saldinger:

https://www.mothersruin.com/software/SuspiciousPackage/

What a super little utility. It gave me specifics about the pkg file, let me look at the install files, and more:

image
image.jpg1206×1296 136 KB

image
image.png1202×1290 101 KB

image
image.jpg1690×1574 217 KB

image
image.jpg1604×1204 284 KB

I wish I knew more about the dev. This utility is free (not even a donation request!), and the dev’s only active internet presence seems to be his Instagram page.

Neat little utility.

1 Like
2

So what’s your point? That shell script looks pretty harmless and the only warning you got was that the package wasn’t signed.

The bash script is just opening the releasenotes by the way. However, for note taking applications there are many (well-known) alternatives. Don’t know why you’re installing this one.

3

Packages are easy to browse. Right click or ^click a package and choose Show Package Contents.

image

The package is revealed as the folder it is.

Or just change the extension on the package, which will make it a folder, then change it back.

4

That I was recommending a cool, free utility in the SOFTWARE forum. :face_with_monocle:

2 Likes
5

Yes, but they don’t let you easily view the contents via QuickLook, nor do they let you sift through all your .pkg files so easily.

6

Thanks for sharing!

In this case it seems like there’s not suspicious about the PKG, but it’s always nice to have something like this in your tool belt.