Add some sort of webhooks support

[ralphbean]

(This is also for things like https://release-monitoring.org that want to find out about new releases of packages like in #347.)

Do you have any interest in having some sort of 'webhooks' support like github does? Something where release-monitoring.org admins (or admins of other sites) could login to warehouse and request that the warehouse app do an http POST back to them when new releases are uploaded?

With this, we could reduce load on your servers by never having to query again, plus we'd be notified of releases in near real-time (instead of waiting 12 hours for our cronjob to run again).

[TomasTomecek]

Other solution could be to do a real-time stream of releases with Transfer-Encoding: chunked.

[jakirkham]

Would this be per package? If so, that would be really interesting.

[brainwane]

Thanks for the suggestion and discussion, @ralphbean and @TomasTomecek and @jakirkham, and sorry for the slow response!

The folks working on Warehouse have gotten funding to concentrate on improving and deploying Warehouse, and have kicked off work towards our development roadmap -- the most urgent task is to improve Warehouse to the point where we can redirect pypi.python.org to pypi.org so the site is more sustainable and reliable.

In our meeting today we discussed this issue. Since this feature isn't something that the legacy site has, we decided this belongs in a future milestone, and so I've moved it.

As Dustin mentioned in #2413, we do currently have https://pypi.org/rss/packages.xml -- I know this isn't as awesome as having webhooks would be, but at least it's something. I've also just created an issue label for API- and feed-related bugs and feature requests, and added this to it, to make it easier for the maintainers to see the ways package maintainers and other Python developers want to interact with Warehouse programmatically.

Thanks and sorry again for the wait.

[jakirkham]

Thanks for the update. No worries.

...the most urgent task is to improve Warehouse to the point where we can redirect pypi.python.org to pypi.org so the site is more sustainable and reliable.

Completely agree! Would be great to see pypi.org become stable. Thanks for working on it. :)

[brainwane]

Carrying over a reminder from #2413: when we implement webhooks support, we should document it in https://warehouse.readthedocs.io/security/#project-and-release-activity-details and https://test.pypi.org/help/#APIs .

[brainwane]

I'll also mention that API-related issues are things we could work on at the PyCon sprints in May.