NPM module to escape HTML