Eric Mann

DGXPCO (Digital Guarantees for eXplicitly Permitted Core Operations) is a proof-of-concept cryptographic signature verification utility for WordPress software updates. The plugin will source manual (offline) signatures for WordPress core updates and prevent the application from updating unless the contents of the update payload are verified with a remote signature.
This provides a second source of truth for the integrity of WordPress updates beyond the MD5 content hash supplied in the header from the WordPress update server. If that server were ever breached, it’s unlikely the server hosting the signatures of the files was also breached. If the signatures ever fail to validate, you can know your site was protected from an attack.

DGXPCO

Jon Tejnung

This plugin will give you three alternatives for managing your WordPress updates:
<ul>
<li>Update automatically – This updates WordPress/themes/plugins automatically and sends an email to the site admin when an update has been performed.</li>
<li>Update automatically (no email) – Same as the first alternative, but without the email.</li>
<li>Inform about updates once a week – This will send an email to the admin once a week if there are anything that can be updated.</li>
</ul>
Notice that only plugins/themes that resides in the WordPress 
repository will be updated/informed about.
The plugin has not been tested and is not primarily made for multi site-installations.

Simple Automatic Updates

Activate automatic updates or weekly notifications for the site.

DGXPCO vs Simple Automatic Updates