Today I tried to update my STS 4.5.0 installation (on top of Eclipse) to 4.6.0.
I did a "Check for updates", kept all the STS4-related bundles checked, then hit "Finish".
The following dialog appears:

Why is this plugin needed? And why isn't it signed?