title: Verify unsigned plugins for Eclipse
body: <p>When I am installing a plug-in by the Eclipse marketplace there is always a warning shown. Is there a way to validate the plugin? Besides downloading it and verify it with a possible supplied (MD5/SHA-1) checksum</p>
  
  <p><img src="https://i.stack.imgur.com/OihpG.png" alt="Eclipse plugin Unsigned warning"></p>