Description:

It would be helpful to be able to access the package JSON API under https://www.archlinux.org/packages/search/json and potentially others. At the moment the Access-Control-Allow-Origin header is missing, so the API cannot be accessed by XHR. I think it is unintentional that this is not possible, because the whole purpose of the API is to be accessible, isn't it? It can be enabled in nginx by simply adding "Access-Control-Allow-Origin: *" as a header. Thanks!
Additional info:
* package version(s)
* config and/or log files etc.
* link to upstream bug report, if any

Steps to reproduce:
Execute the following code in any JavaScript console in a non IE browser that is not on the same Origin as the API:
fetch(
"https://archlinux.org/packages/search/json/?name=pandoc", {
method: 'GET',
mode: 'cors',
headers: {
'Accept': 'application/json',
}
}
)
.then(response => response.json())
.then(json => console.log(json))
.catch(error =>
console.error(error)
);