parallelism

[davisjam]

If scanning many projects, I suggest using a single thread/process per project instead. Easier to reason about.

But if scanning a single project, each analysis phase can be performed across multiple threads.

• This should be handled at the bin/ layer.
• Be careful about the use of tmp files.

[davisjam]

validate-uploads.js could also use some parallelism.