>> One concern is, what about the tooling for telling us when updates to
>> packages are available?
>
> ‘guix refresh’ works for PyPI but not for arbitrary sites.

Why not let 'guix refresh' use PyPI to detect package updates, and then
let somebody manually find the equivalent upstream tarball URI and put
it in the package definition?