I don't have a JEDEC or EIA/J library or anything handy, but I suspect SOT-23-(N) has been named in reference, like that, but that the official designations are not. "SOT-23" refers to one body, officially, as far as I know.
So there are naming conventions coming from several standards bodies, which use a variety of naming conventions (TO-, SO-, SC-, etc.), many of which are similar (compatible) or identical. TO-236A = SOT-23 = SC70 = ...
I suspect, some of them do specify pinouts parametrically (i.e., "SC-70" can have 3, 5 or 6 pins, by the looks of it), so you need to be specific all the time.
I don't see a lot of talk about these things, or even the publications that they must be coming from. Not that they'd be free anyway, because, why would they want that?... Obviously, best practice is, for each and every component you purchase (exactly as purchased, not just the part/family), confirm the package, footprint and pinout. Bother? Yep.
Tim