There is currently no perfect system for a port maintainer to be notified when a port update is available.
The two most promising approaches are:
Since there is no accepted way to catalog the meta-data for an application (e.g. download location, distfile versioning scheme, dependent applications, and so on), these heuristical approaches are the best ones we have right now; the general problem is hard.
Committer's responsibility to ensure that what is changed is appropriate (e.g. avoiding trojaned distfiles).
Disadvantage: this is a 'pull' method rather than a 'push' method