Use `jsesc` instead of `string-escape`

The `string-escape` package has been renamed to `jsesc`.

Closes #5.