[bounty] use-local-storage-state npm package lacks bugs metadata

[wangedmund77-cmyk]

Package / repository

• Package: use-local-storage-state@19.5.0
• Public repository: https://github.com/astoilkov/use-local-storage-state
• npm: https://www.npmjs.com/package/use-local-storage-state
• Bounty source: $5 XMR microbounty: find one small reproducible public software issue #1

Summary

The published npm package metadata is missing standard bugs field(s). This makes the npm sidebar and programmatic package audits less useful because users cannot jump from the package page to the project's docs and/or issue tracker.

Reproduction

npm view use-local-storage-state@19.5.0 name version homepage repository bugs dist.tarball --json

Observed behavior

The package publishes name, version, repository, and dist.tarball, but the following metadata is absent or empty: bugs.

Current related metadata:

• existing homepage: https://github.com/astoilkov/use-local-storage-state

Expected behavior

• bugs.url should point to the public issue tracker, e.g. https://github.com/astoilkov/use-local-storage-state/issues.

Why the fix is likely small

This should be a package metadata-only change in the package manifest. It should not require runtime code changes, dependency changes, build changes, paid services, credentials, or private access.

Relevant file / test pointers

• Package manifest: package.json for use-local-storage-state in the public repository.
• Suggested verification after patch:

npm pack --dry-run --ignore-scripts
npm view use-local-storage-state@19.5.0 name version homepage repository bugs --json

The second command verifies the currently published metadata; after a release, it should show the added field(s).

Environment notes

• macOS, Node v24.15.0, npm 11.12.1
• Public npm registry metadata only

Scope and safety

• Public open-source package metadata issue only
• No private repos, secrets, accounts, KYC, scraping, spam, or destructive actions
• No wallet or payment details included here; payment details can be handled privately after verification if needed

[rock2089]

/attempt

[rock2089]

/opire try

[kingshuaishuai]

Submitted upstream PR: https://github.com/astoilkov/use-local-storage-state/pull/84\n\nScope: metadata-only update for the published use-local-storage-state package manifest, adding bugs.url -> https://github.com/astoilkov/use-local-storage-state/issues.\n\nValidation run locally:\n- node -e "const p=require('./package.json'); if (p.bugs?.url !== 'https://github.com/astoilkov/use-local-storage-state/issues') { console.error(p.bugs); process.exit(1) }"\n- npm pack --dry-run --ignore-scripts\n- git diff --check\n\nPayout details can be provided privately after the upstream PR is accepted.