Compatibility fixes

• Use a non-greedy regex to match links (#16) -- @theshoals
• Constrain the escape-string-regexp dependency (#18) -- @theshoals