Gathering detailed insights and metrics for hexo-theme-landscape
Gathering detailed insights and metrics for hexo-theme-landscape
Installations
npm install hexo-theme-landscapeDeveloper
Developer Guide
BETA
Module System
Unable to determine the module system for this package.
Min. Node Version
Typescript Support
No
Node Version
18.16.0
NPM Version
8.4.0
Statistics
321 Stars
207 Commits
377 Forks
30 Watching
4 Branches
88 Contributors
Updated on 27 Nov 2024
Languages
Stylus (52.69%)
EJS (35.45%)
JavaScript (11.86%)
Total Downloads
Cumulative downloads
Total Downloads
1,677,955
Last day
8.8%
2,701
Compared to previous day
Last week
6.2%
14,460
Compared to previous week
Last month
10.9%
60,538
Compared to previous month
Last year
154.3%
767,868
Compared to previous year
Daily Downloads
Weekly Downloads
Monthly Downloads
Yearly Downloads
No dependencies detected.
Versions
Landscape
A brand new default theme for Hexo.
Installation
Install
If you're using Hexo 5.0 or later, the simplest way to install is through npm:
npm i hexo-theme-landscape
Install via git:
1git clone --depth 1 https://github.com/hexojs/hexo-theme-landscape themes/landscape
If you would like to enable the RSS, the hexo-generator-feed plugin is also required.
Enable
Modify theme setting in _config.yml to landscape.
1_config.yml 2- theme: some-theme 3+ theme: landscape
Update
Install the latest version through npm:
1npm install hexo-theme-landscape@latest
Or update to the latest master branch via git:
1cd themes/landscape 2git pull
Configuration
The configuration file for the theme is _config.yml in the repository. As the default theme for Hexo, hexo-theme-landscape is installed via npm during the hexo init site creation process, so it is generally located in the node_modules/hexo-theme-landscape directory. If you install it via git clone or other methods, it might be located in the themes/landscape directory.
It is important to note that to prevent your modifications to the theme configuration file from being lost or overwritten during theme upgrades, we do not recommend directly modifying this default configuration file. You can copy the theme's _config.yml to your blog's root directory as _config.landscape.yml and configure it according to the documentation of configuration options therein (see Alternate Theme Config).
The following will also detail the usage of some options.
Features
FancyBox
Landscape uses Fancybox to showcase your photos. You can use Markdown syntax or fancybox tag plugin to add your photos.
{% fancybox img_url [img_thumbnail] [img_caption] %}
Sidebar
You can put your sidebar in left side, right side or bottom of your site by editing sidebar setting.
Landscape provides 5 built-in widgets:
- category
- tag
- tagcloud
- archives
- recent_posts
All of them are enabled by default. You can edit them in widget setting.
Header links
You can add links to the header area with icons.
1links: 2 github: https://github.com/your_github_account 3 twitter: https://twitter.com/your_twitter_account 4 telegram: https://t.me/your_telegram_account
No vulnerabilities found.
Reason
no binaries found in the repo
Reason
no dangerous workflow patterns detected
Reason
GitHub workflow tokens follow principle of least privilege
Details
- Info: topLevel 'contents' permission set to 'read': .github/workflows/deploy.yml:13
- Info: no jobLevel write permissions found
Reason
0 existing vulnerabilities detected
Reason
license file detected
Details
- Info: project has a license file: LICENSE:0
- Info: FSF or OSI recognized license: MIT License: LICENSE:0
Reason
Found 25/27 approved changesets -- score normalized to 9
Reason
0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Reason
dependency not pinned by hash detected -- score normalized to 0
Details
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/hexojs/hexo-theme-landscape/deploy.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/hexojs/hexo-theme-landscape/deploy.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/hexojs/hexo-theme-landscape/deploy.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/hexojs/hexo-theme-landscape/deploy.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/hexojs/hexo-theme-landscape/deploy.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/hexojs/hexo-theme-landscape/deploy.yml/master?enable=pin
- Warn: npmCommand not pinned by hash: .github/workflows/deploy.yml:46
- Info: 0 out of 6 GitHub-owned GitHubAction dependencies pinned
- Info: 0 out of 1 npmCommand dependencies pinned
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Reason
security policy file not detected
Details
- Warn: no security policy file detected
- Warn: no security file to analyze
- Warn: no security file to analyze
- Warn: no security file to analyze
Reason
SAST tool is not run on all commits -- score normalized to 0
Details
- Warn: 0 commits out of 28 are checked with a SAST tool
Score
5.8
/10
Last Scanned on 2024-11-18
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More