Before running an application that has been downloaded - even if it is from a trusted source - it is a good idea to ensure it has not been tampered with.
The simplest way to check an application has not be tampered with is by verifying that it has been signed with a valid certificate. This can be performed in Terminal using the codesign command e.g.:
codesign --verify -v /Applications/ID3\ Editor
If the application is signed it can also be assessed to ensure it is allowed. This assessment can be performed with the spctl command e.g.:
spctl --assess -v /Applications/ID3\ Editor
