How to check that NotchStar is notarized with spctl
To check that NotchStar is notarized, open Terminal and run spctl -a -vv on the app or the disk image. A notarized download answers with source=Notarized Developer ID. You can also compare the file’s SHA256 checksum with the one on the install page.
Check the notarization
- Open Terminal from Applications, Utilities.
- For the app, run:
spctl -a -vv /Applications/NotchStar.app
- For the disk image, run the same command with
-t open --context context:primary-signatureand the path to the .dmg.
A notarized Developer ID app prints accepted and a source line that says Notarized Developer ID. Since version 1.0.3 (9 October 2026) every download is signed with a Developer ID and notarized by Apple.
Check the checksum
The install page lists the SHA256 checksum for the current version. Compare it with your file:
shasum -a 256 ~/Downloads/NotchStar-1.0.5.dmg
If macOS still warns you
Versions 1.0.0 to 1.0.2 were only ad hoc signed and did trigger a warning. If you have one of those, download the current disk image again. If you decide to open an app that macOS cannot verify, Apple describes the steps: open System Settings, click Privacy & Security, go to Security and click Open Anyway (the button is available for about an hour after the attempt). Only do that for software you trust. Read the safety guide for what the app does and sends.