Dependency to `any-promise` still exists, which has a global leak issue
this was supposed to be fixed with https://github.com/koajs/koa/issues/945, and it was fixed in `koa-compose`.  But `koa-convert` still has a dependency to an old version of `koa-compose` so `koa` still depends on `any-promise`