
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
Turn-based pair programming CLI with AI. Stay sharp while coding with AI assistance.
Traditional AI coding tools create a passive loop: prompt → wait → review → fix → repeat. You become a code reviewer, not a programmer.
pair makes AI coding interactive:
# Clone and build
git clone https://github.com/gaupoit/pair-cli.git
cd pair-cli
pnpm install
pnpm build
# Link globally
pnpm link --global
# Copy env template
cp .env.example .env
# Add your API key (Gemini is default)
# Get one at https://aistudio.google.com/apikey
echo "GEMINI_API_KEY=your-key-here" >> .env
# Or use Claude instead
# echo "AI_PROVIDER=claude" >> .env
# echo "ANTHROPIC_API_KEY=your-key-here" >> .env
pair start "add user authentication with JWT"
AI breaks down the task into turns:
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
📋 Task: add user authentication with JWT
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
1. ► CURRENT [YOU] Write unit tests for login endpoint
2. ○ PENDING [AI] Implement login endpoint with JWT generation
3. ○ PENDING [YOU] Define TypeScript interfaces for User and Token
4. ○ PENDING [AI] Add token validation middleware
...
# After you've written your code
pair done
pair hint
pair skip
pair status # Current session
pair stats # Your overall stats
pair abandon
| Action | XP |
|---|---|
| Complete your turn | +10 |
| Complete with hint | +5 |
| Skip turn | 0 |
| 3+ turn streak | 1.5x multiplier |
| Command | Description |
|---|---|
pair start <task> | Start a new session |
pair done | Complete current turn |
pair skip | Skip your turn |
pair hint | Get a hint |
pair status | Show session progress |
pair stats | Show your statistics |
pair abandon | Abandon current session |
| You | AI |
|---|---|
| Tests | Implementation |
| Interfaces/Types | Logic |
| Edge cases | Happy path |
| Documentation | Refactoring |
Environment variables in .env:
| Variable | Default | Description |
|---|---|---|
AI_PROVIDER | gemini | AI provider (gemini or claude) |
GEMINI_API_KEY | - | Google AI API key |
ANTHROPIC_API_KEY | - | Anthropic API key |
MIT
FAQs
Turn-based pair programming CLI with AI
We found that pair-cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.