An Application for Inspecting macOS Installer Packages

Suspicious Package for Mac

Join our mailing list

Stay up to date with latest software releases, news, software discounts, deals and more.

Download Suspicious Package 3.5.3

Suspicious Package for Mac

 -  100% Safe  -  Freeware

What's new in this version:

Suspicious Package 3.5.3
- The Receipts tab (added in version 3.5) is now visible automatically. Previously, it would be added only when you clicked on the Previously Installed line in the Package Info tab or used Window > Receipts, but this proved difficult to discover. If you find this annoying and want to go back to the previous behavior, turn off Preferences > General > Show Receipts tab.
- Added File > Show Package in Finder (Cmd-Option-R)
- Added Edit > Copy Path for Package (Cmd-Option-C)
- Added AppleScript support for specifying the target macOS version, i.e. for proper interpretation of packages that use a writable startup volume folder. You can use something like open file "X.pkg" for installing to macOS 10.15

When exporting a file or folder, you can now prevent Suspicious Package from stripping off any access control lists that were defined by the package. Normally, we strip these by default, because the ACLs might prevent the exported item from being removed again, which can be confusing. But if you know what you're doing, you might want to inhibit this. You can either:
- Use File > Export Item, and uncheck Remove any access controls from exported items before clicking Save
- Use the AppleScript export command, adding without access controls removed

Suspicious Package 3.5.2
Ongoing attempts to improve behavior on macOS 10.15 (Catalina):
- The “Welcome to Suspicious Package” window provides a way to bring back finding packages in Catalina's newly protected folders (Desktop, Downloads and Documents). You can choose Fix and pick which folders you'd like Suspicious Package to search, and it will ask macOS for the appropriate permissions. Read more info here
- Opening the Preferences window ought to no longer trigger the “Suspicious Package would like to access files in your Downloads folder” dialog, after upgrading to Catalina. You will still be prompted the first time you use the File > Export Item to Default Folder command, but it should make more sense why that is happening
- Fixed a crash that might occur when the installer scripts contain empty property list or strings files (such as inside an app bundled along with the scripts)
- Improved the handling of XML-format property lists and text-format strings files inside the installer scripts: these are more reliably displayed directly by Suspicious Package, instead of requiring that you open them in another app

Suspicious Package 3.5.1
- Updated for general compatibility with macOS 10.15 (Catalina). We fixed a number of problems, but there are some areas where usability has been unavoidably degraded by new restrictions imposed by macOS — most notably, folder access permission dialogs and elimination of “open in app” buttons from the Quick Look preview
- Added support for packages that install into an alternate folder on Catalina-format startup disks: see more info
- More sensible behavior for the Copy Path for Item command, when pasting into a text context other than the Terminal: instead of producing just the name of the item, it now produces the full path as expected
- Fixed other minor bugs

Suspicious Package 3.5
- that the package is notarized, Suspicious Package shows this on the Package Info tab, and in the Quick Look preview. This is only when running on macOS 10.14 (Mojave). The notarization status will also be shown by spkg --show-signature, and is available from AppleScript via the new notarized property on the installer package element
- Restored individual certificate validity information to the signature detail section of the Quick Look preview
- Fixed various minor bugs, including some performance, scripting and accessibility issues
- Removed support for macOS 10.12 (Sierra) and OS X 10.11 (El Capitan)

Added Receipts tab, showing information about component packages and any matching receipts found on the startup disk. To access the Receipts info:
- Use Window > Receipts (Command-6)
- In the Package Info tab, click on “Previously installed on...” line
- From the spkg tool, use the new --reveal-receipt option (see usage)
- From AppleScript, use the new component package element (see Scripting Dictionary)
- If macOS reports

Suspicious Package 3.4.1
- Improved the “Welcome to Suspicious Package” window to behave better when Spotlight finds non-local packages — such as packages in iCloud Drive or some other download-on-demand cloud provider. (Well, we think it performs better, but we're not in a position to test every cloud provider, and haven't received any actionable information. If you see problems with this and care to help us debug it, please contact us)
- Added an Internet Access Policy to Suspicious Package: this is a mechanism defined by Objective Development, the makers of Little Snitch. If you use Little Snitch, you'll get more useful information about Suspicious Package's network connection attempts — which are for one purpose only: the periodic checking for an updated version of the app
- Fixed a bug that could cause items to be omitted when exporting a folder from certain unusually constructed packages. (These items were always shown in the All Files tab; this bug affected only the completeness of the export)
- Fixed a handful of minor bugs

Suspicious Package 3.4
- Enhanced for Dark Mode appearance and accent color preferences on macOS 10.14 (Mojave)
- Added “Welcome to Suspicious Package” window, giving quick access to recently downloaded packages, and guidance for new users
- Added ability to open InstallESD.dmg without changing the file extension first
- Updated for general compatibility with macOS 10.14 (Mojave)
- This version still works back to OS X 10.11 (El Capitan), but will likely be the last significant update that does
- Removed the “Move Old Plug-in to Trash” feature, since the standalone version of the Quick Look plug-in is long gone
- Uses TLS (a.k.a. HTTPS) for update checking and for linking to the User Guide and FAQ. (These have been redirecting since July 2018, but we now use HTTPS directly)
- Uses the “hardened runtime” and is “notarized” by Apple — these are security features added to macOS 10.14 (Mojave)
- Fixed a few crashes and a handful of minor bugs

Suspicious Package 3.3.2
- Fixed a bug where exporting certain high-level folders would fail, remaining stuck forever as “Waiting for other exports.”
- A secondary click (i.e. a control-click or a right-click) on an item in the All Files tab will now offer a context menu, similar to the Action menu on the toolbar: this can be used to quickly export or open a particular item that is already under the mouse pointer. This also works for items in the scripts browser
- In the Info pane, if you click on the Kind, Owner, Group or Permissions to change the view of that metadata attribute, Suspicious Package will now keep that choice for future windows or tabs (so that you don't have to keep changing it every time). Of course, you can the attribute again at any point; the last view you selected for a given attribute will always be the new default

Suspicious Package 3.3.1
- Added the “spkg” command-line tool, which can be used to quickly open a package in Suspicious Package. This can also be used to retrieve information about the package signature from the Terminal (or from a shell script). For more information about the “spkg” tool — and how to install it — see the User Guide
- Fixed a bug where the Scripts Browser would sometimes show scripts in an apparently arbitrary order, when using macOS 10.13 (High Sierra) and the Apple File System (APFS)
- Fixed a bug where the Export Item and Open With commands were incorrectly enabled for receipts, which don't have the actual installed files for exporting or opening. (Of course, those files might actually be installed on the system, depending on what has happened since the install that created the receipt)
- Fixed a bug where setting Suspicious Package as the default application for installer packages — via Finder's File > Get Info > Open With > Change All — would cause a generic document icon to be used for packages in the Finder

Suspicious Package 3.3
- Added support for macOS 10.13 (High Sierra). This included fixing a crash that might occur when closing windows, and correcting the way that revoked certificates are displayed (they had been shown as generically untrusted rather than as explicitly revoked)
- If a package has a verified signing time, Suspicious Package now shows that information when you use Window > Signature Details (Command-5). This is particularly interesting when the certificate would be otherwise considered expired
- Fixed a problem where a prior install was (sometimes) not noted on the Package Info tab
- The Suspicious Package app now tries harder to activate its Quick Look plug-in, especially after the app has been moved or updated, or after macOS has been updated (more info)
- Removed support for OS X 10.10 (Yosemite) and OS X 10.9 (Mavericks)
- Updated the license agreement to be a bit more explicit, although it is still quite minimalist. Use Help > License Agreement to access it from within the app

Suspicious Package 3.2
- Added support for macOS 10.12 (Sierra)
- Fixed compatibility problems with Sierra's automatic window tabs feature, including the broken Window > Show Previous Tab and Window > Show Next Tab commands. Read more about window tabs in Suspicious Package
- In the Quick Look preview, added Show in Suspicious Package buttons, which open the app directly to a specific file, folder or installer script. From the file browser, hold down the Command key to reveal the Show in Suspicious Package buttons; from the scripts browser, select the script and the button will be shown next to the script name
- Especially on Sierra, be sure to download the disk image, not the XIP archive (more info)

Suspicious Package 3.1
- Added support for opening certain installed files in another application. This includes plain text files and property lists that are reasonably small. Use File > Open Item With
- Added a way to reveal an installer script in the Finder, so it can be easily manipulated even if no apps are available to directly open it. Use File > Open Item With > Finder
- Searching from the Help menu now finds information from the User Guide and FAQ
- Fixed a problem where temporary items (such as installer scripts that had been opened in another application) would not always get deleted when the Suspicious Package window was closed. (OS X would eventually delete these, but Suspicious Package now does a better job of cleaning them up in a timely manner)
- Added support for exporting a selected file or folder, allowing its content to be inspected:
- Use File > Export Item — or drag the item into the Finder — to start an export
- Click the Exports toolbar button Exports toolbar button to see and manage running and completed exports
- From AppleScript, use the new export command to start an export

Suspicious Package 3.0
- Initial app version of Suspicious Package (which now bundles the Quick Look plug-in)
- Finder-like browsing of installed files, with additional metadata
- Viewing of installer scripts in proper editor UI, with clipboard and find support
- Ability to open installer scripts in external applications
- Support for searching and filtering across files or scripts, and for saving searches
- Tracking of browsing history to provide Back and Forward navigation
- Tab-based UI, with ability to open multiple tabs for files or scripts
- Performs analysis of package and flags potential issues for user review
- Scriptability via AppleScript
- Support for OS X 10.11 (El Capitan), OS X 10.10 (Yosemite) or OS X 10.9 (Mavericks). Removed support for OS X 10.8 (Mountain Lion)

Join our mailing list

Stay up to date with latest software releases, news, software discounts, deals and more.