Aveloxis Documentation

Key Features

• Full GitHub + GitLab parity — same data types collected from both platforms, including MR discussion review comments

• Staged collection pipeline — JSONB staging decouples API speed from DB write contention at 400K+ repos

• Postgres-backed queue — no Redis, RabbitMQ, or Celery. Multiple instances share the same queue via SKIP LOCKED

• Git commit analysis — bare clones + git log --numstat for per-file commit data, parent tracking, and Facade aggregates

• Contributor resolution — resolves git commit emails to GitHub users via noreply parsing, Commits API, and Search API

• Dependency & complexity analysis — scans 14 ecosystems, calculates libyear across 12 package registries, runs scc for code complexity

• Vulnerability scanning — OSV.dev batch API across direct AND transitive dependencies, with introduced_by chains, lifecycle stamps, and honest version-resolution labels

• SBOM generation — CycloneDX 1.5 + SPDX 2.3 with license capture from 12 registries and real dependency graphs from 19 lockfile formats

• Interactive visualizations — weekly time-series charts, cross-project comparison with Z-score normalization, dependency license analysis

• REST API — JSON endpoints for stats, time series, licenses, SBOM download, and repo search

• 20 materialized views — 8Knot-compatible analytics views, rebuilt weekly

• Mailing-list ingestion — Apache Pony Mail + lore public-inbox archives, email as a first-class entity

• Distribution tracking — “where is this repo published?” across deps.dev, ecosyste.ms, release assets, and GitHub Packages

• Public showcase — static, SEO-indexable collection + repo snapshot pages (aveloxis generate-showcase)

• Dead repo sidelining — permanently archives 404’d repos while preserving data

• Deterministic contributor IDs — Augur-compatible GithubUUID scheme