Gathering detailed insights and metrics for @mr-hope/vuepress-plugin-back-to-top
Gathering detailed insights and metrics for @mr-hope/vuepress-plugin-back-to-top
A vuepress theme with tons of features✨
Installations
npm install @mr-hope/vuepress-plugin-back-to-topDeveloper Guide
BETA
Typescript
No
Module System
CommonJS
Node Version
12.14.0
NPM Version
lerna/3.20.2/node@v12.14.0+x64 (linux)
Releases
472
Languages
5
TypeScript
SCSS
JavaScript
CSS
HTML
TypeScript (88.71%)
SCSS (9.79%)
JavaScript (0.81%)
CSS (0.61%)
HTML (0.08%)
Developer
Download Statistics
Total Downloads
0
Last Day
0
Last Week
0
Last Month
0
Last Year
0
GitHub Statistics
MIT License
2,370 Stars
5,617 Commits
805 Forks
16 Watchers
21 Branches
116 Contributors
Updated on Jul 14, 2025
Maintainers
1
Package Meta Information
Latest Version
0.1.0-beta.26
Package Id
@mr-hope/vuepress-plugin-back-to-top@0.1.0-beta.26
Unpacked Size
6.05 kB
Size
3.13 kB
File Count
7
NPM Version
lerna/3.20.2/node@v12.14.0+x64 (linux)
Node Version
12.14.0
Total Downloads
Cumulative downloads
Total Downloads
NaN
Last Day
0%
NaN
Compared to previous day
Last Week
0%
NaN
Compared to previous week
Last Month
0%
NaN
Compared to previous month
Last Year
0%
NaN
Compared to previous year
Weekly Downloads
Monthly Downloads
Yearly Downloads
back-to-top plugin
BacktoTop plugin for vuepress-theme-hope.
Usage
1npm i @mr-hope/vuepress-plugin-back-to-top
vuepress-theme-hope 的返回顶部插件。
使用
1npm i @mr-hope/vuepress-plugin-back-to-top
No vulnerabilities found.
Reason
no dangerous workflow patterns detected
Reason
30 commit(s) and 22 issue activity found in the last 90 days -- score normalized to 10
Reason
license file detected
Details
- Info: project has a license file: LICENSE:0
- Info: FSF or OSI recognized license: MIT License: LICENSE:0
Reason
no binaries found in the repo
Reason
SAST tool is run on all commits
Details
- Info: SAST configuration detected: CodeQL
- Info: all commits (9) are checked with a SAST tool
Reason
0 existing vulnerabilities detected
Reason
security policy file detected
Details
- Info: security policy file detected: SECURITY.md:1
- Info: Found linked content: SECURITY.md:1
- Warn: One or no descriptive hints of disclosure, vulnerability, and/or timelines in security policy
- Info: Found text in security policy: SECURITY.md:1
Reason
branch protection is not maximal on development and all release branches
Details
- Warn: branch protection not enabled for branch 'md-enhance-extension'
- Info: 'allow deletion' disabled on branch 'main'
- Info: 'force pushes' disabled on branch 'main'
- Warn: branch 'main' does not require approvers
- Warn: codeowners review is not required on branch 'main'
- Info: status check found to merge onto on branch 'main'
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
Found 0/22 approved changesets -- score normalized to 0
Reason
detected GitHub workflow tokens with excessive permissions
Details
- Warn: no topLevel permission defined: .github/workflows/build-project.yml:1
- Warn: no topLevel permission defined: .github/workflows/codeql-analysis.yml:1
- Warn: no topLevel permission defined: .github/workflows/demo-test.yml:1
- Warn: no topLevel permission defined: .github/workflows/deploy-github-demo.yml:1
- Warn: no topLevel permission defined: .github/workflows/deploy-github-docs.yml:1
- Warn: no topLevel permission defined: .github/workflows/deploy-production.yml:1
- Warn: no topLevel permission defined: .github/workflows/issue-daily.yml:1
- Warn: no topLevel permission defined: .github/workflows/issue-labeled.yml:1
- Warn: no topLevel permission defined: .github/workflows/linter-and-unit-test.yml:1
- Warn: no topLevel permission defined: .github/workflows/main.yml:1
- Warn: no topLevel permission defined: .github/workflows/publish.yml:1
- Info: no jobLevel write permissions found
Reason
dependency not pinned by hash detected -- score normalized to 0
Details
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-project.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/vuepress-theme-hope/vuepress-theme-hope/build-project.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-project.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/vuepress-theme-hope/vuepress-theme-hope/build-project.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-project.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/vuepress-theme-hope/vuepress-theme-hope/build-project.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-project.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/vuepress-theme-hope/vuepress-theme-hope/build-project.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/vuepress-theme-hope/vuepress-theme-hope/codeql-analysis.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/vuepress-theme-hope/vuepress-theme-hope/codeql-analysis.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/vuepress-theme-hope/vuepress-theme-hope/codeql-analysis.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/vuepress-theme-hope/vuepress-theme-hope/codeql-analysis.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/demo-test.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/vuepress-theme-hope/vuepress-theme-hope/demo-test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/demo-test.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/vuepress-theme-hope/vuepress-theme-hope/demo-test.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/demo-test.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/vuepress-theme-hope/vuepress-theme-hope/demo-test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/demo-test.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/vuepress-theme-hope/vuepress-theme-hope/demo-test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/demo-test.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/vuepress-theme-hope/vuepress-theme-hope/demo-test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/demo-test.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/vuepress-theme-hope/vuepress-theme-hope/demo-test.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/demo-test.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/vuepress-theme-hope/vuepress-theme-hope/demo-test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/demo-test.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/vuepress-theme-hope/vuepress-theme-hope/demo-test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/demo-test.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/vuepress-theme-hope/vuepress-theme-hope/demo-test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/demo-test.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/vuepress-theme-hope/vuepress-theme-hope/demo-test.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/demo-test.yml:106: update your workflow using https://app.stepsecurity.io/secureworkflow/vuepress-theme-hope/vuepress-theme-hope/demo-test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/demo-test.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/vuepress-theme-hope/vuepress-theme-hope/demo-test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy-github-demo.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/vuepress-theme-hope/vuepress-theme-hope/deploy-github-demo.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy-github-demo.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/vuepress-theme-hope/vuepress-theme-hope/deploy-github-demo.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/deploy-github-demo.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/vuepress-theme-hope/vuepress-theme-hope/deploy-github-demo.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy-github-demo.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/vuepress-theme-hope/vuepress-theme-hope/deploy-github-demo.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/deploy-github-demo.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/vuepress-theme-hope/vuepress-theme-hope/deploy-github-demo.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy-github-docs.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/vuepress-theme-hope/vuepress-theme-hope/deploy-github-docs.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy-github-docs.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/vuepress-theme-hope/vuepress-theme-hope/deploy-github-docs.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/deploy-github-docs.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/vuepress-theme-hope/vuepress-theme-hope/deploy-github-docs.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy-github-docs.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/vuepress-theme-hope/vuepress-theme-hope/deploy-github-docs.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/deploy-github-docs.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/vuepress-theme-hope/vuepress-theme-hope/deploy-github-docs.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy-production.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/vuepress-theme-hope/vuepress-theme-hope/deploy-production.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy-production.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/vuepress-theme-hope/vuepress-theme-hope/deploy-production.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/deploy-production.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/vuepress-theme-hope/vuepress-theme-hope/deploy-production.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy-production.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/vuepress-theme-hope/vuepress-theme-hope/deploy-production.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/deploy-production.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/vuepress-theme-hope/vuepress-theme-hope/deploy-production.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/deploy-production.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/vuepress-theme-hope/vuepress-theme-hope/deploy-production.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/deploy-production.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/vuepress-theme-hope/vuepress-theme-hope/deploy-production.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/deploy-production.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/vuepress-theme-hope/vuepress-theme-hope/deploy-production.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy-production.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/vuepress-theme-hope/vuepress-theme-hope/deploy-production.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy-production.yml:88: update your workflow using https://app.stepsecurity.io/secureworkflow/vuepress-theme-hope/vuepress-theme-hope/deploy-production.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/deploy-production.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/vuepress-theme-hope/vuepress-theme-hope/deploy-production.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy-production.yml:96: update your workflow using https://app.stepsecurity.io/secureworkflow/vuepress-theme-hope/vuepress-theme-hope/deploy-production.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/deploy-production.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/vuepress-theme-hope/vuepress-theme-hope/deploy-production.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy-production.yml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/vuepress-theme-hope/vuepress-theme-hope/deploy-production.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy-production.yml:139: update your workflow using https://app.stepsecurity.io/secureworkflow/vuepress-theme-hope/vuepress-theme-hope/deploy-production.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/deploy-production.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/vuepress-theme-hope/vuepress-theme-hope/deploy-production.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy-production.yml:147: update your workflow using https://app.stepsecurity.io/secureworkflow/vuepress-theme-hope/vuepress-theme-hope/deploy-production.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/deploy-production.yml:163: update your workflow using https://app.stepsecurity.io/secureworkflow/vuepress-theme-hope/vuepress-theme-hope/deploy-production.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/deploy-production.yml:181: update your workflow using https://app.stepsecurity.io/secureworkflow/vuepress-theme-hope/vuepress-theme-hope/deploy-production.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy-production.yml:202: update your workflow using https://app.stepsecurity.io/secureworkflow/vuepress-theme-hope/vuepress-theme-hope/deploy-production.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy-production.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/vuepress-theme-hope/vuepress-theme-hope/deploy-production.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/deploy-production.yml:210: update your workflow using https://app.stepsecurity.io/secureworkflow/vuepress-theme-hope/vuepress-theme-hope/deploy-production.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy-production.yml:213: update your workflow using https://app.stepsecurity.io/secureworkflow/vuepress-theme-hope/vuepress-theme-hope/deploy-production.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/deploy-production.yml:228: update your workflow using https://app.stepsecurity.io/secureworkflow/vuepress-theme-hope/vuepress-theme-hope/deploy-production.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-daily.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/vuepress-theme-hope/vuepress-theme-hope/issue-daily.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-daily.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/vuepress-theme-hope/vuepress-theme-hope/issue-daily.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-labeled.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/vuepress-theme-hope/vuepress-theme-hope/issue-labeled.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-labeled.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/vuepress-theme-hope/vuepress-theme-hope/issue-labeled.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/linter-and-unit-test.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/vuepress-theme-hope/vuepress-theme-hope/linter-and-unit-test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/linter-and-unit-test.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/vuepress-theme-hope/vuepress-theme-hope/linter-and-unit-test.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/linter-and-unit-test.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/vuepress-theme-hope/vuepress-theme-hope/linter-and-unit-test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/linter-and-unit-test.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/vuepress-theme-hope/vuepress-theme-hope/linter-and-unit-test.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/linter-and-unit-test.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/vuepress-theme-hope/vuepress-theme-hope/linter-and-unit-test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/vuepress-theme-hope/vuepress-theme-hope/publish.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/vuepress-theme-hope/vuepress-theme-hope/publish.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/vuepress-theme-hope/vuepress-theme-hope/publish.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/vuepress-theme-hope/vuepress-theme-hope/publish.yml/main?enable=pin
- Info: 0 out of 40 GitHub-owned GitHubAction dependencies pinned
- Info: 0 out of 27 third-party GitHubAction dependencies pinned
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Score
5.7
/10
Last Scanned on 2025-07-07
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More