diff --git a/.github/FUNDING.yml b/.github/FUNDING.yml
new file mode 100644
index 0000000..43510af
--- /dev/null
+++ b/.github/FUNDING.yml
@@ -0,0 +1,5 @@
+# SPDX-FileCopyrightText: 2026 LibreCode coop and contributors
+# SPDX-License-Identifier: AGPL-3.0-or-later
+
+patreon: libresign
+github: libresign
diff --git a/.github/config.yml b/.github/config.yml
new file mode 100644
index 0000000..c382080
--- /dev/null
+++ b/.github/config.yml
@@ -0,0 +1,5 @@
+# SPDX-FileCopyrightText: 2026 LibreCode coop and contributors
+# SPDX-License-Identifier: AGPL-3.0-or-later
+
+# Comment to be posted to on PRs from first time contributors in your repository
+newPRWelcomeComment: "Thanks for opening your first pull request in this repository! :v:"
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 0000000..e55dee4
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,15 @@
+# SPDX-FileCopyrightText: 2026 LibreCode coop and contributors
+# SPDX-License-Identifier: AGPL-3.0-or-later
+
+# To get started with Dependabot version updates, you'll need to specify which
+# package ecosystems to update and where the package manifests are located.
+# Please see the documentation for all configuration options:
+# https://help.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
+
+version: 2
+updates:
+  # Maintain dependencies for npm
+  - package-ecosystem: "npm"
+    directory: "/"
+    schedule:
+      interval: "daily"