PluginStatsRailo Dev installs statistics
By IWEB · GitHub Marketplace
Auto-fix security vulnerabilities in your PRs. Deterministic patches, no AI
Railo Dev has 10 recorded installs on GitHub Marketplace.
It ranks #1016 of 1,393 tracked GitHub Marketplace listings by installs.
PluginStats has 1 daily observations since Oct 16, 2026; the latest is from Oct 16, 2026.
About Railo Dev
Railo scans every pull request for security vulnerabilities and opens a companion Fix PR with deterministic, verified patches. Developers review a clean diff and click Merge.
Supports 17 vulnerability types across Python, JavaScript, TypeScript, Go, Java, Ruby, and C#. Fixes SQL injection, XSS, hardcoded secrets, command injection, path traversal, and more.
Runs on GitHub Actions — your code never leaves your environment. No AI, no LLM-generated patches.
How it works
• Developer opens a pull request • Railo scans the diff for vulnerability patterns (powered by Semgrep) • Generates deterministic fixes — same vulnerability, same fix, every time • Each fix is verified using formal methods (Z3 SMT solver) • In warn mode: posts proposed fixes as PR comments • In enforce mode: opens a Fix PR with verified patches ready to merge
Quick Start
Add a workflow file to your repo:
- uses: IWEBai/railo-action@v2 with: mode: warn env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
What it fixes (17 vulnerability types, 6 languages)
Python: SQL injection, hardcoded secrets, XSS, command injection, path traversal, SSRF, weak cryptography, SSTI, XXE, open redirect, CSRF, unsafe deserialization, cookie security
JavaScript/TypeScript: Hardcoded secrets, DOM XSS, React dangerouslySetInnerHTML, SQL injection, command injection, Express security headers
Go, Java, Ruby, C#: Hardcoded credentials to environment variables
Why deterministic?
Every fix is rule-based — no AI, no LLM-generated patches. An auditor can inspect the rule once and trust every future application. Fixes are verified with Z3 SMT solver with proof strength labels.
Safety
• Start in warn mode — see proposed fixes before enabling auto-fix • Max diff limits — large fixes are flagged for review • Fix PR isolation — your original branch is never modified • Confidence gating — uncertain findings are escalated to humans
Runs on GitHub Actions. No external API calls. Your code never leaves your environment.
Description from the GitHub Marketplace listing.
- Security
- Code quality
Where Railo Dev sits in the listing
Each band is one page of 20. Installs on a log scale. Placement is projected from installs, so it can differ from the marketplace's own sort order. Hover a dot to see the listing.
Charts
Images: 30d · 1y · all time · 1600×900 dark
Adoption over time
7/30/90-day growth
Filled points are observed values; hollow points come from Internet Archive snapshots of the listing page. Dashed segments span periods with no observations — values between points are not interpolated.
Recent observations
Full history (1)Similar GitHub Marketplace plugins
Data source
Install counts (installations of each GitHub App across accounts and organizations) are read from public GitHub Marketplace listing pages. GitHub does not publish ratings. Category positions reflect GitHub's own popularity sort.
Listing: https://github.com/marketplace/railo-dev. First seen Oct 16, 2026; last successful collection Oct 16, 2026. See the methodology.