
Security News
OWASP 2025 Top 10 Adds Software Supply Chain Failures, Ranked Top Community Concern
OWASP’s 2025 Top 10 introduces Software Supply Chain Failures as a new category, reflecting rising concern over dependency and build system risks.
@openfin/simple-winston
Advanced tools
Simple consistent logging.
npm i @openfin/simple-winston
simple-winston exposes a function that returns a winston logger. Its a simple wrapper on winston.loggers.get.
import makeLogger from 'simple-winston'
const logger = makeLogger("some-label", "warn", true);
logger.info("Hi we are logging!");
idLabel:stringThe label and internal winston id.
level:stringValid values are: silly info debug warn error
Defaults to whatever is in NODE_DEBUG otherwise sets to debug. When this is set that logger will only output logs with a level higher or equal to. We reccomond setting the NODE_DEBUG environment variable instead of setting this yourself.
colorize:booleanIf the environment variable NODE_ENV is set to production this defaults to false otherwise its set to true.
NODE_DEBUG_ONLYsimple-winston also looks for the environemnt variable NODE_DEBUG_ONLY. This allows you to filter logs by label/id. Uses string.startsWith for matches, use commas to seperate labels. Example:
import makeLogger from 'simple-winston'
const loga = makeLogger("loga");
const logb = makeLogger("logb");
const someOtherLog = makeLogger("someOtherLog");
loga.info("I will get logged")
logb.info("I will also get logged");
someOtherLog.info("I will be sileneced");
==============
NODE_DEBUG_ONLY=log node test.js
Can be combined with NODE_DEBUG to limit levels as well as ids.
Logs are always in this format. <ISO string> - <level>: [<label>] ...your-text
FAQs
Basic winston with basic log level support
The npm package @openfin/simple-winston receives a total of 12 weekly downloads. As such, @openfin/simple-winston popularity was classified as not popular.
We found that @openfin/simple-winston demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 7 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
OWASP’s 2025 Top 10 introduces Software Supply Chain Failures as a new category, reflecting rising concern over dependency and build system risks.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.