Suspicious Package

Suspicious Package lets users open macOS installer packages and examine their contents without executing the installation. It displays the package’s signature, download origin, notarization status, and Apple Silicon compatibility, allowing a quick assessment of trustworthiness. The interface provides a hierarchical view of files that their metadata, and a Quick Look preview directly from Finder, plus the ability to open text files and property lists.

For deeper inspection, the tool reveals scripts that will run during installation, installer receipts, and any potential issues flagged by the package. Users can also export selected files or folders from the package for further analysis. The Quick Look extension integrates with macOS, giving a convenient visual summary without launching the full application.

The software is positioned for anyone who needs to verify macOS installers—such as developers, system administrators, or security‑conscious users—by offering a more thorough alternative to the Finder’s “Show Package Contents” and the built‑in Installer view. It is distributed as freeware and is marked as stable.