[stubish]

A properly designed registry doesn't have to cost much to run. The costs are incurred when people use the registry for distribution, or for all the infrastructure needed to monetize the registry and track users. All a registry needs to provide is an index of URLs, signing keys, and some useful metadata to enable discovery. Trivial in its purest form, with more cost if you want advanced features like ratings or curation or your own authentication service.