@allanfriedman I'm not aware of any formal academic study on that.
But as for me, it depends on the codebase / ecosystem I'm working with. There are some registries for that:
Ex if I work in Python, that will be PyPI, the Python Package Indexer:
https://pypi.org/
For Rust, crates.io:
https://crates.io/
For Go:
https://pkg.go.dev/
Of course also searching or google searching on GitHub.
etc. Plus technological survey, most important for me since I'm working on embedded products = 95% C/C++ = no de facto package manager = no de facto package registry. ¯\_(ツ)_/¯
@allanfriedman I also miss the time when the idea of a registry was even sensible - as owner of one of the biggest “awesome lists” I am pretty sure it can never work.
But mostly the answer now is go digging around awesome lists.