> among the 999 most popular crates on crates.io, around 17% contained code that didn't match their code repository.

Wonder if that includes all the crate "squatters", countless times I've found a crate that was empty (and had been for years) because they wanted to reserve the name...