
Security News
White House Authorizes Private Companies to Conduct Offensive Cyber Operations
A new federal program will let vetted U.S. cybersecurity firms help investigate and disrupt foreign cybercrime groups under government direction.
tracebug-sdk
Advanced tools
Zero-backend, browser-only SDK that records user sessions and generates bug reproduction steps. Data stays in localStorage.
Zero-backend bug reproduction tool. Install as a dependency, runs entirely in the browser, stores everything in localStorage. When an error occurs, it auto-generates human-readable reproduction steps.
No servers. No databases. No API keys. Just npm install and go.
Works with any frontend framework: React, Angular, Vue, Next.js, Nuxt, Vite, Svelte, SvelteKit, Remix, Astro, or plain HTML.
User interacts with your app
↓
SDK captures: clicks, inputs, dropdowns, form submits, navigation, API calls, errors
↓
Events stored in localStorage (new session per page load)
↓
Error occurs → repro steps generated instantly in-browser
↓
Developer clicks 🐛 → sees full bug report + timeline
↓
Download report as JSON, text, or standalone HTML
npm install tracebug-sdk
import TraceBug from "tracebug-sdk";
TraceBug.init({ projectId: "my-app" });
That's it. The SDK will:
localStorage (nothing leaves the browser)# The person sharing runs:
npm pack
# The person installing runs:
npm install ./tracebug-sdk-1.0.0.tgz
npm install github:YOUR_USERNAME/tracebug-ai
npm install tracebug-sdk
TraceBug.init({
projectId: "my-app", // Required: identifies your app
maxEvents: 200, // Max events per session (default 200)
maxSessions: 50, // Max sessions in localStorage (default 50)
enableDashboard: true, // Show the 🐛 button (default true)
});
import TraceBug, { getAllSessions, clearAllSessions, deleteSession } from "tracebug-sdk";
// Pause / resume recording
TraceBug.pauseRecording();
TraceBug.resumeRecording();
TraceBug.isRecording(); // → true/false
// Access session data
const sessions = getAllSessions();
const bugs = sessions.filter(s => s.errorMessage);
// Cleanup
clearAllSessions();
deleteSession("session-id");
TraceBug.destroy(); // Removes all listeners + dashboard
| Event Type | Details |
|---|---|
| Clicks | Element tag, text, id, className, aria-label, role, data-testid, href (links), button type |
| Inputs | Field name, type, actual value (sensitive fields auto-redacted as [REDACTED]), placeholder |
| Dropdowns | Selected option text + value, all available options listed |
| Form Submits | Form id, action, method, all field values (passwords redacted) |
| Checkbox/Radio | Checked/unchecked state |
| Navigation | Route from → to |
| API Requests | URL, method, status code, response time in ms |
| Errors | Message, stack trace, source file, line, column |
| Console Errors | console.error() calls |
| Unhandled Rejections | Promise rejection reason + stack |
Sensitive fields are automatically detected and redacted:
type="password")password, secret, token, ssn, credit[REDACTED] — the actual value is never storedThe SDK never captures its own events. Clicks on the 🐛 button, interactions inside the dashboard panel — none of these appear in the timeline.
!important CSS, cannot be overlapped by app UIThe SDK ships dual format (CJS + ESM) with conditional exports:
| Format | File | Works with |
|---|---|---|
ESM (import) | dist/index.js | Vite, Next.js, Nuxt, SvelteKit, modern webpack |
CJS (require) | dist/index.cjs | Angular CLI, older webpack, Node.js |
| TypeScript | dist/index.d.ts | Full type support in both modes |
Bundlers automatically pick the right format via the exports field in package.json.
cd example-app
npm install
npm run dev
Open http://localhost:3000 and:
npm install
npm run build
Output goes to dist/ (both index.js and index.cjs). The prepare script auto-builds when installed from GitHub.
cd tracebug-ai
npm link
cd your-app
npm link tracebug-sdk
npm pack
# Share tracebug-sdk-1.0.0.tgz with your team
npm uninstall tracebug-sdk
Then remove the TraceBug.init() call from your app's entry file.
Created and coded by Prashant Singh Mangat
MIT
FAQs
Capture a browser bug into one offline .html file your AI coding agent reads over MCP and fixes — session replay, console, network, repro timeline, and a generated failing test. Local-first, zero backend. Free.
The npm package tracebug-sdk receives a total of 32 weekly downloads. As such, tracebug-sdk popularity was classified as not popular.
We found that tracebug-sdk demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
A new federal program will let vetted U.S. cybersecurity firms help investigate and disrupt foreign cybercrime groups under government direction.

Research
/Security News
The campaign amassed more than 75,000 installs by targeting Russian-speaking users seeking access to blocked services.

Company News
Open source maintainers are under more pressure than ever. We're raising our open source program from the Team plan to the Business plan, free.