@adguard/dnr-rulesets
Utility to create AdGuard DNR rulesets for mv3 extensions
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source — the axios compromise (March 2026) relied on exactly this gap.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:dist/filters/local_script_rules.js | AI (source-diff): This file contains AdGuard scriptlet filter rules — minified JS strings mapped to expanded implementations. This is expected content for an ad-blocking DNR ruleset package, not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/filters/chromium-mv3/local_script_rules.js | AI (source-diff): These files contain AdGuard's scriptlet lookup tables — minified ad-blocking JS used as object keys with expanded implementations as values. This is the package's documented design, not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/filters/opera-mv3/local_script_rules.js | AI (source-diff): Same as chromium-mv3 variant: AdGuard scriptlet lookup tables with minified keys and readable implementations. Expected build artifact for this package. | ai | |
| publish-pattern | rapid-publish | AI (publish-pattern): Package has 13,351 versions with timestamp-based version numbers, indicating a fully automated filter-list update pipeline. Rapid publishing is the normal operating mode for this package. | ai | |
| phantom-deps | phantom-dep:chokidar | AI (phantom-deps): CLI tool legitimately uses chokidar for file watching; declared in dependencies and referenced in config files. | ai | |
| dependencies | unvetted-dep:@adguard/agtree | AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. | ai | |
| phantom-deps | phantom-dep:@adguard/re2-wasm | AI (phantom-deps): First-party AdGuard dependency declared in package.json; phantom-dep flag is a false positive for same-org packages. | ai | |
| phantom-deps | phantom-dep:commander | AI (phantom-deps): CLI tool legitimately uses commander for CLI argument parsing; declared in dependencies. | ai | |
| dependencies | unvetted-dep:@adguard/logger | AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. | ai | |
| dependencies | unvetted-dep:@adguard/re2-wasm | AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. | ai | |
| dependencies | unvetted-dep:@adguard/tsurlfilter | AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. | ai |
Versions (showing 25 of 9734)
| Version | Deps | Published |
|---|---|---|
| 3.0.20251029030044 | 5 / 27 | |
| 3.0.20251029000047 | 5 / 27 | |
| 3.0.20251028210218 | 5 / 27 | |
| 3.0.20251028180043 | 5 / 27 | |
| 3.0.20251028150045 | 5 / 27 | |
| 3.0.20251028090049 | 5 / 27 | |
| 3.0.20251028060045 | 5 / 27 | |
| 3.0.20251028030045 | 5 / 27 | |
| 3.0.20251028000048 | 5 / 27 | |
| 3.0.20251027210046 | 5 / 27 | |
| 3.0.20251027180043 | 5 / 27 | |
| 3.0.20251027150050 | 5 / 27 | |
| 3.0.20251027120045 | 5 / 27 | |
| 3.0.20251027090423 | 5 / 27 | |
| 3.0.20251027060047 | 5 / 27 | |
| 3.0.20251027030043 | 5 / 27 | |
| 3.0.20251027000045 | 5 / 27 | |
| 3.0.20251026210043 | 5 / 27 | |
| 3.0.20251026180043 | 5 / 27 | |
| 3.0.20251026150045 | 5 / 27 | |
| 3.0.20251026120044 | 5 / 27 | |
| 3.0.20251026090044 | 5 / 27 | |
| 3.0.20251026060045 | 5 / 27 | |
| 3.0.20251026030044 | 5 / 27 | |
| 3.0.20251026000043 | 5 / 27 |
v3.0.20251029030044
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.0.20251028180043
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.0.20251028060045
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.0.20251027180043
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.0.20251027150050
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.0.20251027090423
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.