re. #8 Remove the `winston` dependency, as its no longer used after #2. Logging should be handled by the consumer
