One more that I like is: http://www.mothersruin.com/software/SuspiciousPackage/

Shows the contents of any pkg file including scripts