Tool needed: Matrix notification from crates.io

[lovelaced]

Describe your problem and idea for the tool

From https://github.com/paritytech/devops/issues/192

It'd be nice to have a "crate published" notification in a Riot-channel whenever a crate owned by paritytech:core-devs gets updated.

How do you solve this problem now?

We don't :(

Who's going to use it?

Yes, quite usefull at least for security audit purposes.
Crates.io ACLs suck, basically anyone can publish anything; so we'd better to at least be aware when this happens.

So this would be at least for the security team, and @dvdplm from the other tooling team actually was the original requestor.

Importance

• Would be nice to have it at some point in the future
• Lack of this instrument really prevents some people from working effectively
• If we don't make it by the deadline — we're doomed!

Deadline

None, the devops issue has been open for a long time already 😅

Additional info

Potentially could become a part of a multi-purpose Parity matrix bot our bot suite. We have a lot of general ideas for matrix bots but really don't have any current tooling that uses them effectively beyond general monitoring webhooks etc. I can highly recommend using the matrix-nio API as it supports e2ee, and the template is a great place to start: https://github.com/anoadragon453/nio-template

[mordamax]

Yan suggests to take a look at https://newreleases.io/ for this as potential way to solve it