General dependency cleanup

[jeluard]

Lodestar libraries depend on a number of external dependencies for historical reasons.
Identify dependencies that are not maintained anymore or can be considered a security risk.

• Remove any-signal dependency #6490
• Remove lodash usage #6489
• Remove got dependency #6488

Lodestar libraries dependencies

Following is a comprehensive list a direct dependencies (excluding lodestar, chainsafe, libp2p and ethereum-cryptography dependencies; chainsafe and libp2p libraries should be analyzed similarly):

api

• eventsource
• qs

beacon-node

• @ethersproject/abi
• @fastify/bearer-auth
• @fastify/cors
• @fastify/swagger
• @fastify/swagger-ui
• @multiformats/multiaddr
• c-kzg
• datastore-core
• datastore-level
• deepmerge
• fastify
• interface-datastore
• it-all
• it-pipe
• jwt-simple
• lodash
• multiformats
• prom-client
• qs
• snappy
• strict-event-emitter-types
• systeminformation
• uint8arraylist
• xxhash-wasm

cli

• @multiformats/multiaddr
• deepmerge
• ethers
• find-up
• got
• inquirer
• js-yaml
• prom-client
• proper-lockfile
• rimraf
• source-map-support
• uint8arrays
• yargs

config

nothing

db

• it-all
• level

flare

• source-map-support
• yargs

fork-choice

nothing

light-client

• mitt
• strict-event-emitter-types

logger

• winston
• winston-daily-rotate-file
• winston-transport

params

nothing

reqresp

• it-all
• it-pipe
• snappy
• snappyjs
• uint8-varint
• uint8arraylist

state-transition

• buffer-xor

types

nothing

utils

• any-signal
• bigint-buffer
• case
• js-yaml

validator

• strict-event-emitter-types

Analysis

Unmaintained librairies

• buffer-xor
• bigint-buffer
• source-map-support
• case
• js-yaml
• jwt-simple
• lodash

Low value providing libraries

• any-signal
• it-all
• case
• deepmerge
• lodash
• got
• find-up

[philknows]

Related to #7193