for corporate services we do every 30 days. which is standard. emergency patches get direct support and resolved quickly.

idk, also it is not about the frequency you update, it is usually about how long has it been since package is published to the internet

see concept of min release age https://pnpm.io/blog/releases/10.16

i wonder if other package manager have similar thing or not

You can use pnpm instead of npm. pnpm has a "Delay dependency updates" feature where you can install package versions that are x old only.
See https://pnpm.io/supply-chain-security#delay-dependency-updates

Edit: I just found out, that this can also be specified in npm and yarn: https://gist.github.com/mcollina/b294a6c39ee700d24073c0e5a4e93104