>Lots of projects use Debian and docker, etc...is it even ethical to donate to an npm package before donating to the dozens of free tech layers node sits on top of?

Are you asking whether it is ethical to do something that the authors have explicitly said is OK?