deps: replace raw-body with native approach

[SuperchupuDev]

raw-body was used in a way that it only converted the request to a Buffer. This PR replaces usage of raw-body with a less complex, native approach, removing not just the 11 dependencies that came with raw-body, but also undici's only subdependency (that was gone after updating undici). As such this PR lowers the amount of transitive dependencies in this package from 13 down to one (1).

I've tested that this approach and the way raw-body was used both give the same output, making this a free ~40% decrease in total bundle size

Code I ran to test

https://runkit.com/embed/4hcq12gepy26

[MorganVonBrylan]

raw-body does a lot more than just retrieve the body though, it also checks the body length and handles things like stream abortions.

[velddev]

Would love to turn the SDK into a zero-dependency library, although we'd need a few more tests to ensure this would work across most HTTP clients such as express, hono, etc.

[SuperchupuDev]

turning this into a zero dep library shouldn't be hard after this pr, i believe undici can be removed considering node versions below 18 are not supported oh undici was already removed :^)

raw-body does a lot more than just retrieve the body though, it also checks the body length and handles things like stream abortions.

is there a default length limit raw-body uses? as far as i'm aware the limit option which configures this is not in use. regarding aborting the stream, i can add some extra logic for handling that

[MorganVonBrylan]

The limit option is absolutely in use, I don't know what makes you think it isn't. A payload larger than it triggers a 413 Entity Too Large. And no, it does not have a default value.
raw-body also checks that the Content-Length header does match the body size, and replies with a 400 if it doesn't.

But I will admit it is a small package. If you just want to remove a dependency, you could just copy its 300-line index.js. And its tests. It's all under MIT, after all.

[MorganVonBrylan]

Actually there's another thing: this SDK assumes you're using Express (the entire Webhook class only works with an Express client). And Express depends on body-parser, which itself depends on raw-body.

In other words, raw-body is going to be installed anyway. So there isn't really any overhead to top-gg/sdk depending on it directly.