Ok so check this out, it's huge, but it's the content of the repositories published to S3: https://github.com/osquery/osquery-packages and it will remain updated with each sync, that will (1) cause resigning events to be identified, (2) provide a real audit-log and comparator for what exists in S3. I want to expand that more to include the scripts that sign and publish the packages too.