Use `jsesc` instead of `string-escape`

The `string-escape` package has been renamed to `jsesc`. This patch updates the dependency.

For now the old `string-escape` package is still available as a mirror, but it might be removed in the future.

Please publish a new version of your package after merging this. Sorry for the inconvenience, and thanks!