
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
@newdara/avaia
Advanced tools
Proactive AI Programming Teacher
Avaia is an MCP server that transforms Claude into a pedagogically-informed programming tutor. It uses spaced repetition (FSRS-5), designed productive failure, and adaptive scaffolding to create lasting learning.
~/.local/bin isn't in PATHnpx @newdara/avaia now runs the MCP serverregisterTrackTools() for curriculum progressionnpx @newdara/avaia — Run MCP server (for claude mcp add)npx @newdara/avaia-teach — CLI wrapper with timing injection (optional enhanced experience)# 1. Install Claude CLI
curl -fsSL https://claude.ai/install.sh | bash
# 2. Add Avaia MCP to Claude
claude mcp add avaia -- npx @newdara/avaia
# 3. Authenticate (choose one)
claude login # Use Claude account
# OR
export ANTHROPIC_API_KEY="sk-..." # Use API key
# 4. Start learning
claude
The database is created automatically on first run.
Download Avaia.app from the releases page and drag to Applications. The setup wizard will guide you through configuration.
Or build from source:
cd gui
pip install -r requirements.txt
python server_webview.py # Run in dev mode
# OR
./build_webview.sh # Build native app → dist/Avaia.app
Once configured, Claude Code will have access to 53 pedagogical tools including:
start_session / end_session — Session lifecycle managementget_next_step — Weakness-aware next actiontrigger_sandbox — Designed failure exercisesget_diagnostic_question — Code prediction tasksinfer_emotional_state — Timing-based emotional detectionget_hint — Independence-based scaffoldinglog_review — FSRS spaced repetitionselect_track — Change learning trackThe desktop app includes:
Avaia includes 7 pre-seeded learning tracks:
| Track | Language | Focus |
|---|---|---|
| JavaScript Web Development | JavaScript | DOM, events, async, full-stack |
| Python Data Science | Python | pandas, numpy, visualization |
| C Systems Programming | C | Memory, pointers, systems |
| Data Structures & Algorithms | Language-agnostic | Core CS fundamentals |
| CS Theory | Theory | Complexity, automata, proofs |
| ML Engineering | Python | PyTorch, training, deployment |
| Avaia Core | JavaScript | The default beginner track |
Traditional tutorials teach concepts first, then apply them. Avaia inverts this:
The project IS the curriculum. Concepts are discovered through necessity.
Based on research in:
git clone https://github.com/NewDara-Star/avaia
cd avaia
npm install
npm run build
npm run db:seed
MIT
FAQs
Proactive AI Programming Teacher - MCP server for Claude Code
We found that @newdara/avaia demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.