Is winston safe to use?

winston has no known vulnerabilities on the latest version (3.19.0). DepScope rates its health at 98/100 (low risk).

What is the latest version of winston?

The latest version of winston is 3.19.0, released 2025-12-07.

Does winston have known vulnerabilities?

No known vulnerabilities on the latest version of winston.

Is winston deprecated?

No, winston is actively maintained. Latest release: 3.19.0 (2025-12-07).

What are alternatives to winston?

Popular alternatives to winston in npm include: ?, semver, minimatch, debug, brace-expansion.

winston

npmv3.19.0

A logger for just about everything.

License MITpermissive94 versions8 maintainers11 deps24,852,255 weekly dl

winstonjs/winston

/ 100

Health

safe to use

[email protected] is safe to use (health: 98/100)

Health breakdown0 – 100

25/25

maintenance

20/20

popularity

25/25

security

15/15

maturity

13/15

community

0/15

popularity_floor

Vulnerabilities

Bundle & TypeScript

📦

Bundle Size

146.2 KBminified

37.1 KB gzipped

11 direct dependencies

side effects

🌟

TypeScript

10/10typed

bundled

Quality signals

Download trend

stable(0%)

Publish security

npm signed

Health History

Dependency Tree

License Audit

Dependencies (11)

async logform one-time is-stream stack-trace triple-beam @colors/colors readable-stream @dabh/diagnostics winston-transport safe-stable-stringify

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/winston