Relay indirectly depends on ua-parser-js (agpl + no trusted publishing)

[Blitz2145]

Love the new release (v21) and the upgrades. I was wondering if there are any plans to update/remove the ua-parser-js dep, since its AGPL and old versions do not use trusted publishing.

Related: facebook/fbjs#519 and https://npmx.dev/package/fbjs (no trusted publishing and pulls old ua-parser-js)

[captbaritone]

Looks like fbjs is not going to do this so probably our best bet is to see if we can drop the dependency on fbjs? Maybe someone could do a deep dive on what this is being used for and what it would take to rip it out?