R 3.5.3 not codesigned

[chelming]

I'm creating an account on their mailing list to try and report it, but the pkg for 3.5.3 has no signature. 3.5.2 was signed but not 3.5.3.

$ pkgutil --check-signature /Users/cwhits/Downloads/R-3.5.3.pkg 
Package "R-3.5.3.pkg":
   Status: no signature

[hjuutilainen]

Thanks for reporting here and thanks for taking the time and informing the R developers. I see from their mailing list response that they appreciated your report.

Their fixed installer package has apparently been updated across their download servers.