---
title: "winston 3.19.0"
description: "Latest published version of winston is 3.19.0, licensed MIT. Current as of our last registry check."
url: https://inlinr.com/packages/winston
lang: en
---

[Packages](https://inlinr.com/packages)

# winston

3.19.0 · 7 Dec 2025 MIT 36.6M / week [Repository](https://github.com/winstonjs/winston) [Homepage](https://github.com/winstonjs/winston#readme) [npm](https://www.npmjs.com/package/winston) [Atom feed](https://inlinr.com/packages/feed/winston)

Your version 

## Where each line stands

[Plan an upgrade](https://inlinr.com/packages/winston/upgrade)

LineNewestSecurity

- 3.x 3.19.0 No known advisory Latest line
- 2.x 2.4.7 No known advisory [To 3.19.0](https://inlinr.com/packages/winston/upgrade/2.4.7-3.19.0)
- 1.x 1.1.2 No known advisory [To 3.19.0](https://inlinr.com/packages/winston/upgrade/1.1.2-3.19.0)
- 0.x 0.9.0 No known advisory [To 3.19.0](https://inlinr.com/packages/winston/upgrade/0.9.0-3.19.0)

## Latest releases

[All 106 releases](https://inlinr.com/packages/winston/releases)

1. 3.x · latest line
2. ### [3.19.0](https://inlinr.com/packages/winston/releases/3.19.0 "Open this release") [](https://github.com/winstonjs/winston/releases/tag/v3.19.0 "Read this release where it was published")  
7 Dec 2025

  - Run npm audit fix [e7ccdc4](https://github.com/winstonjs/winston/commit/e7ccdc4)
  - Don't include jest.config.js in npm package [5a63c8c](https://github.com/winstonjs/winston/commit/5a63c8c)
  - Append error cause when using `logger.child()` ([#2467](https://github.com/winstonjs/winston/issues/2467)) [e74a7ae](https://github.com/winstonjs/winston/commit/e74a7ae)
3. ### [3.18.3](https://inlinr.com/packages/winston/releases/3.18.3 "Open this release") [](https://github.com/winstonjs/winston/releases/tag/v3.18.3 "Read this release where it was published")  
30 Sep 2025

  - Update diagnostics dependency (removes fix-esm transitive dependency) [a15a9e9](https://github.com/winstonjs/winston/commit/a15a9e9)
4. ### [3.18.2](https://inlinr.com/packages/winston/releases/3.18.2 "Open this release") [](https://github.com/winstonjs/winston/releases/tag/v3.18.2 "Read this release where it was published")  
30 Sep 2025

  - Bump diagnostics package to resolve [#2583](https://github.com/winstonjs/winston/issues/2583) (again) [f4582c3](https://github.com/winstonjs/winston/commit/f4582c3)

Dependency tracking · free for 3 projects

## Know when your own dependencies move

This page watches winston. inlinr reads your package.json and keeps the same watch on every dependency you declare, then tells you only what needs you.

- Advisories reach you  
An email when a critical or high advisory affects a project, before the next install.
- Upgrades checked first  
Peer ranges, Node, ESM-only and types changes read before you bump.
- Only what matters  
Majors and breaking notes stay; patches and sibling bumps fold into one line.

[How dependency tracking works](https://inlinr.com/dependencies)

## Security

No known security advisory.

## Health

[Details](https://inlinr.com/packages/winston/security#signals)

- **Provenance**:
- **Publisher**:
- **Maintainers**:
- **Scorecard**:
- **Size**:

## Weekly downloads

Reading releases, release notes and advisories…

Registry facts last checked 3 Nov 2026\. Releases and advisories last read 3 Nov 2026.