How software arrives.
WHAT THE ROUTES ARE
The App Store Downloaded disk images or packages from developers Package managers, for development tools Enterprise deployment tooling
WHAT THE APP STORE PROVIDES
Reviewed applications, sandboxed, with updates handled.
WHAT IT RESTRICTS
Applications requiring capabilities sandboxing forbids.
WHAT THAT MEANS
Many developer and system tools are distributed outside it.
WHAT GATEKEEPER DOES
Verifies that downloaded software is signed and notarised before allowing it to run.
WHAT NOTARISATION IS
Apple scanning software submitted by a developer, and issuing a ticket permitting it to run.
WHY IT EXISTS
It allows distribution outside the store while retaining a malware check.
WHAT TO DO ABOUT UNSIGNED SOFTWARE
Establish where it came from, before overriding the protection.
WHAT NOT TO DO
Disable the protection system-wide.
WHAT A PACKAGE MANAGER PROVIDES
Command-line installation of development tools and libraries.
WHAT TO USE IT FOR
Development dependencies, not general applications.
WHAT TO REVIEW PERIODICALLY
What is installed, and what starts automatically.