Please upgrade to winston 3.x to avoid licensing issue

[sltam]

Winston 2.x had a dependency on the cycle npm package which has a problematic licensing situation that they refuse to fix. This was subsequently fixed in 3.0.0-rc0.

Would be nice if prompt can upgrade to Winston 3.x to avoid this issue.

[nmccready]

Its been 2+ years... Can we move or get a response on this?

[nmccready]

Ahh I see the upgrade path is a nightmare in the unit testing. vows looks like a maintenance nightmare.

[nmccready]

Bumping wiston with .cli() has breaking changes which causes havoc.

[caub]

Yea, I'm maintaining this repo, but I think I'll tell the other owners that we might want to archive this repo. I don't feel like updating its core, instead I think there are alternatives, something simple like https://github.com/heapwolf/prompt-sync for example as suggested by another user, I also made http://github.com/caub/prompt-ajv for an almost drop-in replacement

[mriedem]

Note the comment from #226 (comment) but if you're on prompt 1.3.0 you can do an update and get winston 2.4.6 (I ran npm audit fix in my project to get that) for the fix.