Is winston-logstash safe to use?

winston-logstash has no known vulnerabilities on the latest version (2.0.4). DepScope rates its health at 72/100 (moderate risk).

What is the latest version of winston-logstash?

The latest version of winston-logstash is 2.0.4, released 2026-03-26.

Does winston-logstash have known vulnerabilities?

No known vulnerabilities on the latest version of winston-logstash.

Is winston-logstash deprecated?

No, winston-logstash is actively maintained. Latest release: 2.0.4 (2026-03-26).

What are alternatives to winston-logstash?

Popular alternatives to winston-logstash in npm include: semver, minimatch, ansi-styles, debug, brace-expansion.

What license does winston-logstash use?

winston-logstash is licensed under MIT.

winston-logstash

npmv2.0.4

A Logstash transport for winston

License MITpermissive26 versions1 maintainers1 deps10,026 weekly dl

jaakkos/winston-logstash

/ 100

Health

safe to use

[email protected] is safe to use (health: 72/100)

Health breakdown0 – 100

20/25

maintenance

10/20

popularity

25/25

security

15/15

maturity

2/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (1)

winston-transport

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/winston-logstash