Pacifist is a macOS package and archive inspector. It opens installer packages, disk images and several archive formats, then displays their folders, files, scripts and metadata without first running the installer. Pacifist can extract one component instead of installing the complete package, inspect what an installer intends to place on the Mac, and compare package contents with files already installed. It changes nothing until the user chooses an extraction or installation action.
Packages reveal contents
A macOS package can contain payload files, installation scripts and conditions that the normal Installer window summarizes only briefly. Pacifist exposes that structure in a browser. The user can inspect paths, sizes and scripts before deciding whether to proceed. Disk images and archives open through the same general interface, although their internal metadata differs.
Reading a script does not prove that every action is safe. A script can depend on environment, privileges or files that exist only during installation. Pacifist makes the text visible, but the user still needs enough shell and macOS knowledge to interpret it. A signed package can also contain behavior that is intentional yet unwanted.
Extraction skips the installer
Pacifist can extract a selected file or folder from a package without executing the package’s complete installation sequence. This helps recover an application resource, reinstall one damaged component or inspect a payload in a temporary folder. It differs from the normal installer, which may run scripts, set permissions and update receipts around the payload.
That difference creates a practical limit. Extracting a binary alone may omit frameworks, launch services, permissions or configuration work that the package expects. The file can appear present and still fail because its supporting items never arrived. Replacing a protected system component can also require administrator authority and may conflict with macOS security controls.
Receipts trace installers
macOS installation receipts record which package placed paths on the system. Pacifist searches those receipts to answer which installer claimed a selected file. It can then use the original package, when available, to extract another copy. This is more exact than guessing from a filename shared by several products.
A receipt is evidence of a past installation, not a backup of its complete payload. If the source package has disappeared, the receipt cannot recreate missing bytes. Receipts can also remain after manual file deletion or an incomplete uninstall, so a claimed path may no longer exist.
Verification compares files
Pacifist can scan the installed system against a package and flag files that are missing or changed. A changed result does not automatically mean malware. Updates, user customization and later installers can legitimately replace a shared component. The package date and the current system state need comparison before restoring an older copy.
Extracting the package version over a newer system file can create a downgrade or break code signing. A backup and a clear source package belong ahead of any replacement. Running the comparison without extracting first separates investigation from repair.
Remote archives save bandwidth
Pacifist can inspect supported archives over the web without downloading the full payload first. This depends on the server accepting the range requests needed to retrieve selected portions. A server that blocks ranges, requires a session cookie or generates temporary links can force a full download or fail entirely.
Remote inspection also does not remove the need to verify the source. Opening a package tree from an untrusted address can show plausible filenames while the payload remains malicious. The publisher’s domain, package signature and expected source still matter before extraction.
Quick Look stays read-only
Finder Quick Look integration can display archive contents without opening the full Pacifist window. It is useful for identification, but it does not perform a complete script or receipt analysis. Opening the archive in Pacifist remains necessary before selecting files, comparing installations or choosing an extraction destination.
