Pinhead77

You can use pnpm instead of npm. pnpm has a “Delay dependency updates” feature where you can install package versions that are x old only.
See https://pnpm.io/supply-chain-security#delay-dependency-updates

Edit: I just found out, that this can also be specified in npm and yarn: https://gist.github.com/mcollina/b294a6c39ee700d24073c0e5a4e93104

Don’t forget the instance operators! How can we get them more donations?

I recently found out about https://crowdbucks.fund/ (which is done for the Fediverse) and https://liberapay.com/

Maybe a first step would be to offer a native way to link to such donation platforms (link on the user profile, link on each posting, …)

Also donations for the instance should be promoted more prominent.