seph
01/20/2021, 3:09 AMxar
format. Sometimes tar
will read them, else xar
will.pkgbuild
to get a “flat package”
2. productbuild
to get a “distribution package”
3. xcrun altool
to submit it to notary
(And the larger framework sets the notarization uuid as storage metadata which something else comes along to check later on)--output-format xml
makes it way easier to parse