Aveloxis vs Augur: same mission, rebuilt from the ground up
Aveloxis is the Go successor to Augur, built by the same team that created and maintained Augur for a decade. It keeps everything that made Augur useful — the full schema, Augur-byte-compatible contributor IDs, 8Knot compatibility — and rebuilds the machinery underneath: one binary and three processes instead of a Celery/RabbitMQ/Redis constellation, a Postgres SKIP LOCKED queue, and collection throughput that comfortably handles fleets of 90,000+ repositories on a single host.
It also does things Augur never did: SBOM generation (CycloneDX + SPDX), OSV vulnerability scanning across every dependency, full GitLab parity, libyear across 12 registries, OpenSSF Scorecard on both platforms, and a built-in web GUI with cross-project comparison.
Side by side
| Aspect | Augur | Aveloxis |
|---|---|---|
| Language | Python | Go — one static binary |
| Processes | Celery workers + Flask API + Flower + Redis + RabbitMQ | 3 processes: serve, web, api |
| Queue | Celery + RabbitMQ + Redis | Postgres SKIP LOCKED — no extra infrastructure |
| Schema | Augur schema | Full Augur parity: 142 tables, Augur-byte-compatible contributor UUIDs |
| 8Knot | Yes | Yes — 100% compatible via the aveloxis_augur_data schema |
| GitLab support | Partial | Full parity with GitHub across every feature |
| SBOM generation | — | CycloneDX 1.5 + SPDX 2.3, downloadable via GUI and API |
| Vulnerability scanning | — | OSV.dev across all dependencies (NVD, GHSA, PyPI, RustSec, Go) |
| Dependency scanning | 12 languages | 14 ecosystems; libyear across 12 registries |
| OpenSSF Scorecard | GitHub only | GitHub and GitLab, with history |
| User interface | CLI (admin-only web) | OAuth web GUI: charts, cross-project comparison, SBOM download |
| API efficiency | No conditional requests | ETag caching (304 = free), HTTP/2, round-robin key rotation |
| Repo renames | Not handled proactively | Detected, deduplicated, and healed automatically |
| Dead repos | Retried forever | Sidelined permanently, data preserved |
| Mailing lists | GitHub-archive only | Apache Pony Mail + lore.kernel.org public-inbox, email as a first-class entity |
| Error recovery | Manual restart | Automatic stale-lock recovery, deadlock retry, backoff with jitter |
| Scaling | One Celery worker per queue | 40+ workers per host; 90,000+ repos on one machine in production |
| Non-GitHub/GitLab repos | — | Git-only mode: facade, analysis, scorecard, SBOM |
Migrating from Augur
Migration is a first-class feature, not an afterthought. Point Aveloxis at your existing Augur database and it imports your repository list and API keys directly:
aveloxis import-from-augur --augur-db "postgres://augur:...@host/augur" aveloxis import-keys-from-augur --augur-db "postgres://augur:...@host/augur" aveloxis serve --workers 40
Aveloxis creates its own schemas and never touches your Augur data. Your 8Knot dashboards keep working — point them at search_path = aveloxis_augur_data,aveloxis_data. The full walkthrough lives in the Augur migration guide.
Built by Augur’s creators. Everything you relied on, nothing you fought with.