>

Extract a .pkg Installer's Contents with pkgutil --expand-full

See every file a package would install — without running the installer.

macOSpkgutildeveloperpkgLow risk
Run pkgutil --expand-full installer.pkg destination-folder to unpack both the package and its inner Payload.

01Command

Command
$ pkgutil --expand-full ~/Downloads/Tool.pkg ~/Desktop/ToolExpanded

02What it does

Plain --expand only splits the .pkg into component archives; --expand-full goes one step further and unpacks the Payload so you can browse the actual .app and files. Use it to audit what an installer touches or to confirm a download is what its name claims — nothing is registered with the system.

03Risk

RiskLow risk
!Warning: Extracting is not installing: scripts inside the package will not run, and apps unpacked this way may lack signatures being finalized.

04Undo

✓No undo needed — this command does not change persistent state.

05Sources

  • pkgutil – Query and manipulate package receipts
    ss64.com · technical · 2026-09-17
    Evidence: pkgutil --expand-full flattens a package: it expands the archive and unpacks the Payload archive inside, revealing every file the installer would place.

Last verified: 2026-09-18 · Category: Developer

06Related solutions

Verify a .pkg Installer's Signature with pkgutil
macOSpkgutilcodesigninstaller

Inspect the certificate chain of a macOS package file before you install anything from it.

Low risk ✓ 2026-09-17
Inspect Package Receipts and File Lists with pkgutil
macOSpkgutilcleanuppackage

List what an installer actually put on your disk, long after the installer window closed.

Low risk ✓ 2026-09-17