Comment 4 for bug 145849

The user "forest" on #launchpad today suggested that it could be a notification on the PPA page or on the owner's (or uploader's?) person page. This wouldn't be perfect, as the user can't be identified reliably in the case of an unsigned upload, but as long as it can be dismissed I think it's OK. See package copy notifications for a similar example.