Validating signatures isn’t straightforward. GUI apps are limited, and command tools confusing and prone to user error.
pkgutil
Introducing a new version of SystHist which lets you see everything that Apple, the App Store, and silent updates install, for El Capitan, Sierra, and High Sierra.
The Eclectic Light Company 