It’s super easy to setup CUPS to do AirPrint nowadays. I have a small container on my Proxmox box that just runs CUPS and talks to the printer over the network.
I know that’s not accessible for the tech un-savvy, but it’s there for those of us that are.
NPM makes an interesting trade off - with the current scheme, security updates which improve the security posture of the application are accepted by default. Those are far more common than malicious updates. Would pinning dependencies lead to larger problems? Imagine if a log4j-like issue showed up tomorrow; most NPM-managed software would just require reinstallation to be fixed.
I know that’s not accessible for the tech un-savvy, but it’s there for those of us that are.