use commitish package by tarball url rather than git url

Author: mattberther

package-lock.json

@@ -43,6 +43,6 @@
     "file-stream-rotator": "^0.5.7",
     "object-hash": "^2.0.1",
     "triple-beam": "^1.3.0",
-    "winston-transport": "github:winstonjs/winston-transport#868d657"
+    "winston-transport": "https://github.com/winstonjs/winston-transport/archive/868d6577956f82ee0b021b119a4de938c61645f7.tar.gz"
   }
 }