Pinhead77

You can use pnpm instead of npm. pnpm has a “Delay dependency updates” feature where you can install package versions that are x old only.
See https://pnpm.io/supply-chain-security#delay-dependency-updates

Edit: I just found out, that this can also be specified in npm and yarn: https://gist.github.com/mcollina/b294a6c39ee700d24073c0e5a4e93104

Sadly I just found out that Qobuz is using Amazon Web Services (AWS). So using Qobuz means giving money to Amazon… What a shame!

Regarding underwear, you can take a look at SCHIESSER. The company was founded in Germany in 1875 and has always stood for quality. The company has been Israeli-owned since 2011. But the company location is still Germany.

See also: https://en.wikipedia.org/wiki/Schiesser or https://de.wikipedia.org/wiki/Schiesser

Don’t forget the instance operators! How can we get them more donations?

I recently found out about https://crowdbucks.fund/ (which is done for the Fediverse) and https://liberapay.com/

Maybe a first step would be to offer a native way to link to such donation platforms (link on the user profile, link on each posting, …)

Also donations for the instance should be promoted more prominent.