Replaces util.escapeRegexp by the escape-string-regexp package.
Sorts package.json dependencies alphabetically.

Newer versions of npm do this automatically, and doing so now will ease future diffs.
Bumps diff to 1.0.8.
Bumps commander to 2.3.0.
Bumps coffee-script to 1.8.0.
updating some deps

- debug@2.0.0 reports to `STDERR` instead of `STDOUT`, which is a good idea as per [debug/120](https://github.com/visionmedia/debug/issues/120)
- mkdirp@0.5.0 has better error-handling
- coffee-script@1.8.0 doesn't need to be locked down IMO, since it's a `devDependency`