Verify code signature of a package installer
There is no current way to verify the signature using Installer.app before accepting the pre-flight script. This is a long standing oversight by Apple's engineers.
Please provide feedback or, if you are a developer, formally report this problem to Apple.