> OSS maintainers don't have a unified mechanism to alert packagers of updates.

Gentoo developers have http://euscan.gentooexperimental.org/ . Quite some automation is on the way to come soon.