
Security News
Ruby's Bundler 4.0.18 Extends Cooldown to bundle lock and bundle cache
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.
TraceBug CLI — local MCP server that lets AI coding agents (Claude Code, Cursor, VS Code) debug TraceBug bug-report exports, plus framework setup via `tracebug init`. Zero dependencies.
The TraceBug CLI — a local MCP server that lets AI coding agents debug TraceBug bug-report exports, plus one-command framework setup.
Zero dependencies. ~24 KB. Node ≥ 18.
See it work first: tracebug.dev/proof — an unedited transcript of Claude going from crash to root cause in five tool calls, reading a real export through this server.
Connect Claude Code, Cursor, Windsurf, or VS Code to the .html bug reports the TraceBug Chrome extension exports:
claude mcp add tracebug -- npx -y tracebug mcp --dir ./bug-reports
The agent gets nine read tools and a /tracebug:debug_bug_report prompt:
list_bug_reports — scan a folder and summarize every exportget_bug_report — report overview plus a prioritized investigation guideget_console_errors — captured console output with stack tracesget_network_activity — captured requests, failed ones first, with response snippetsget_repro_steps — plain-English steps, user actions, full session timelineget_screenshot — screenshots as real image contentget_playwright_test — a generated failing Playwright spec that replays the session and asserts the failure is gone; red until fixed, green afterresolve_stack — maps minified stack frames to original source via .map files found in the repo the server runs fromget_fix_context — one-call fix starter: failing request, triggering user action, source-map-resolved stack, failing-test availabilityThe last three close the fix loop: pull the failing test, patch, re-run until green.
Everything stays on your machine. The server binds to stdio only, opens zero network connections, and reads the report files from your disk. No account, no cloud, no upload.
Full guide: tracebug.dev/docs/mcp
npx tracebug init
Detects your framework (React, Next.js, Vue, Angular, Svelte, Nuxt, vanilla) and prints the setup snippet for the tracebug-sdk — the embeddable capture SDK.
| Package | What it is |
|---|---|
tracebug (this one) | CLI: MCP server + init. For developers receiving bug reports. |
tracebug-sdk | The full SDK for embedding capture in your app. Includes this CLI too. |
| Chrome extension | Zero-code capture for QA/testers on any website. |
MIT © Prashant Singh Mangat
FAQs
TraceBug CLI — local MCP server that lets AI coding agents (Claude Code, Cursor, VS Code) debug TraceBug bug-report exports, plus framework setup via `tracebug init`. Zero dependencies.
The npm package tracebug receives a total of 177 weekly downloads. As such, tracebug popularity was classified as not popular.
We found that tracebug demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.

Security News
During a UK cyber test, a Mythos 5 agent used sockpuppets, social engineering, and prompt injection to try to get a maintainer to merge malware.

Company News
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.