Please resolve security alerts and bump Highlight.js dependency

@WinOpsDBA @qubyte

If neither of you have time to maintain this anymore then we'll need mark it archived and I'll add a notice to the README that it's currently unmaintained and in need of a maintainer.

Please let me know.

Thanks,

Read the README and inspect the repository's current security alerts and Highlight.js dependency metadata first; the issue names no files or tests. Done means the reported alerts are resolved and the dependency is bumped, or the README is updated with an unmaintained notice if maintenance is unavailable.

Written by the indexing model from the issue text.