← Home

@adguard/dnr-rulesets

Utility to create AdGuard DNR rulesets for mv3 extensions

100
Versions
GPL-3.0-only
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures No source commit

Without SLSA provenance there is no cryptographic link between this tarball and the public source — the axios compromise (March 2026) relied on exactly this gap.

Maintainers

ameshkovmaximtopblakhard

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
source-diff obfuscated-file:dist/filters/local_script_rules.js AI (source-diff): This file contains AdGuard scriptlet filter rules — minified JS strings mapped to expanded implementations. This is expected content for an ad-blocking DNR ruleset package, not malicious obfuscation. ai
source-diff obfuscated-file:dist/filters/chromium-mv3/local_script_rules.js AI (source-diff): These files contain AdGuard's scriptlet lookup tables — minified ad-blocking JS used as object keys with expanded implementations as values. This is the package's documented design, not malicious obfuscation. ai
source-diff obfuscated-file:dist/filters/opera-mv3/local_script_rules.js AI (source-diff): Same as chromium-mv3 variant: AdGuard scriptlet lookup tables with minified keys and readable implementations. Expected build artifact for this package. ai
publish-pattern rapid-publish AI (publish-pattern): Package has 13,351 versions with timestamp-based version numbers, indicating a fully automated filter-list update pipeline. Rapid publishing is the normal operating mode for this package. ai
phantom-deps phantom-dep:chokidar AI (phantom-deps): CLI tool legitimately uses chokidar for file watching; declared in dependencies and referenced in config files. ai
dependencies unvetted-dep:@adguard/agtree AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
phantom-deps phantom-dep:@adguard/re2-wasm AI (phantom-deps): First-party AdGuard dependency declared in package.json; phantom-dep flag is a false positive for same-org packages. ai
phantom-deps phantom-dep:commander AI (phantom-deps): CLI tool legitimately uses commander for CLI argument parsing; declared in dependencies. ai
dependencies unvetted-dep:@adguard/logger AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
dependencies unvetted-dep:@adguard/re2-wasm AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
dependencies unvetted-dep:@adguard/tsurlfilter AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai

Versions (showing 100 of 9729)

Version Deps Published
3.2.20251029151149 10 / 27
3.2.20251029140037 10 / 27
3.2.20251029130037 10 / 27
3.2.20251029120042 10 / 27
3.2.20251029110037 10 / 27
3.2.20251029100036 10 / 27
3.2.20251029090042 10 / 27
3.2.20251029080434 10 / 27
3.2.20251029070035 10 / 27
3.2.20251029060041 10 / 27
3.2.20251029050035 10 / 27
3.2.20251029040035 10 / 27
3.2.20251029030041 10 / 27
3.2.20251029020039 10 / 27
3.2.20251029010041 10 / 27
3.2.20251029000042 10 / 27
3.2.20251028230033 10 / 27
3.2.20251028220034 10 / 27
3.2.20251028210432 10 / 27
3.2.20251028200035 10 / 27
3.2.20251028190035 10 / 27
3.2.20251028180038 10 / 27
3.2.20251028170037 10 / 27
3.2.20251028160040 10 / 27
3.2.20251028150040 10 / 27
3.2.20251028140040 10 / 27
3.2.20251028130618 10 / 27
3.2.20251028090043 10 / 27
3.2.20251028080041 10 / 27
3.2.20251028070035 10 / 27
3.2.20251028060040 10 / 27
3.2.20251028050035 10 / 27
3.2.20251028040034 10 / 27
3.2.20251028030040 10 / 27
3.2.20251028020035 10 / 27
3.2.20251028010039 10 / 27
3.2.20251028000044 10 / 27
3.2.20251027230034 10 / 27
3.2.20251027220035 10 / 27
3.2.20251027210041 10 / 27
3.2.20251027200034 10 / 27
3.2.20251027190034 10 / 27
3.2.20251027180038 10 / 27
3.2.20251027170036 10 / 27
3.2.20251027160037 10 / 27
3.2.20251027150045 10 / 27
3.2.20251027140037 10 / 27
3.2.20251027130036 10 / 27
3.2.20251027120040 10 / 27
3.2.20251027110039 10 / 27
3.2.20251027100038 10 / 27
3.2.20251027090059 10 / 27
3.2.20251027080712 10 / 27
3.2.20251027070037 10 / 27
3.2.20251027060044 10 / 27
3.2.20251027050035 10 / 27
3.2.20251027040035 10 / 27
3.2.20251027030040 10 / 27
3.2.20251027020036 10 / 27
3.2.20251027010041 10 / 27
3.2.20251027000041 10 / 27
3.2.20251026230035 10 / 27
3.2.20251026220035 10 / 27
3.2.20251026210040 10 / 27
3.2.20251026200036 10 / 27
3.2.20251026190036 10 / 27
3.2.20251026180041 10 / 27
3.2.20251026170035 10 / 27
3.2.20251026160036 10 / 27
3.2.20251026150040 10 / 27
3.2.20251026140037 10 / 27
3.2.20251026130037 10 / 27
3.2.20251026120040 10 / 27
3.2.20251026110036 10 / 27
3.2.20251026100037 10 / 27
3.2.20251026090040 10 / 27
3.2.20251026080036 10 / 27
3.2.20251026070035 10 / 27
3.2.20251026060040 10 / 27
3.2.20251026050035 10 / 27
3.2.20251026040036 10 / 27
3.2.20251026030039 10 / 27
3.2.20251026020036 10 / 27
3.2.20251026010043 10 / 27
3.2.20251026000040 10 / 27
3.0.20251112120051 5 / 27
3.0.20251112090047 5 / 27
3.0.20251112060241 5 / 27
3.0.20251112030047 5 / 27
3.0.20251112000049 5 / 27
3.0.20251111210046 5 / 27
3.0.20251111180047 5 / 27
3.0.20251111150056 5 / 27
3.0.20251111120500 5 / 27
3.0.20251111090046 5 / 27
3.0.20251111060046 5 / 27
3.0.20251111030046 5 / 27
3.0.20251111000047 5 / 27
3.0.20251110210046 5 / 27
3.0.20251110180043 5 / 27
Showing 100 of 9729 Next page →
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.