I don't think it's unreasonable to ask all the third party maintainers to make forum accounts, put them all in a group, and ping them once a year. If they're unwilling to put in the effort there, IMO they're treating the package manager responsibility poorly.
I know generally speaking the updates aren't usually incompatible in the way sync-target upgrades have been, but especially with Joplin Cloud (hopefully?) becoming one of the main ways of funding the project, it becomes more serious to consider that you're actually representing someone elses brand and work, and potentially, damaging someone elses brand and work.
I'm perfectly aware the majority of users of the snap for example can't usually tell it's a third party package, which is why I actually specifically come on and try to root out mistakes or problems it's creating uniquely, because it actually presents itself as Joplin Desktop. If they don't want to make themselves available like that, they should call themselves Joplisn't instead.
Personally however, I don't find it too hard to go through every project I'm partially responsible for and keep myself up to date with what's going on, so I don't think I've ever been more than a few hours out of sync except where I might be particularly busy on the day. It isn't that much to ask for, and CI systems exist for a reason anyway.
2 Likes