You can use pnpm instead of npm. pnpm has a “Delay dependency updates” feature where you can install package versions that are x old only.
See https://pnpm.io/supply-chain-security#delay-dependency-updates

Edit: I just found out, that this can also be specified in npm and yarn: https://gist.github.com/mcollina/b294a6c39ee700d24073c0e5a4e93104

Check out the StreetComplete app that makes it easy to complete missing OSM data in your GPS area.

Don’t forget the instance operators! How can we get them more donations?

I recently found out about https://crowdbucks.fund/ (which is done for the Fediverse) and https://liberapay.com/

Maybe a first step would be to offer a native way to link to such donation platforms (link on the user profile, link on each posting, …)

Also donations for the instance should be promoted more prominent.