@thomasfuchs “messy but doable”
You could pull the package archive metadata, unpack+read that, and compare (for this you’d need to keep state of remote version or compare at runtime)
there’s also apt commands but those would need execution somewhere that could run apt
Also you could have the host report its current and delta, then monitor the reports?
(Dunno what you’re trying to solve for, so just throwing ideas out)