← Home

@adguard/dnr-rulesets

npm

Utility to create AdGuard DNR rulesets for mv3 extensions

100
Versions
GPL-3.0-only
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures No source commit

Without SLSA provenance there is no cryptographic link between this tarball and the public source — the axios compromise (March 2026) relied on exactly this gap.

Maintainers

ameshkovmaximtopblakhard

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
source-diff obfuscated-file:dist/filters/local_script_rules.js AI (source-diff): This file contains AdGuard scriptlet filter rules — minified JS strings mapped to expanded implementations. This is expected content for an ad-blocking DNR ruleset package, not malicious obfuscation. ai
source-diff obfuscated-file:dist/filters/chromium-mv3/local_script_rules.js AI (source-diff): These files contain AdGuard's scriptlet lookup tables — minified ad-blocking JS used as object keys with expanded implementations as values. This is the package's documented design, not malicious obfuscation. ai
source-diff obfuscated-file:dist/filters/opera-mv3/local_script_rules.js AI (source-diff): Same as chromium-mv3 variant: AdGuard scriptlet lookup tables with minified keys and readable implementations. Expected build artifact for this package. ai
publish-pattern rapid-publish AI (publish-pattern): Package has 13,351 versions with timestamp-based version numbers, indicating a fully automated filter-list update pipeline. Rapid publishing is the normal operating mode for this package. ai
phantom-deps phantom-dep:chokidar AI (phantom-deps): CLI tool legitimately uses chokidar for file watching; declared in dependencies and referenced in config files. ai
dependencies unvetted-dep:@adguard/agtree AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
phantom-deps phantom-dep:@adguard/re2-wasm AI (phantom-deps): First-party AdGuard dependency declared in package.json; phantom-dep flag is a false positive for same-org packages. ai
phantom-deps phantom-dep:commander AI (phantom-deps): CLI tool legitimately uses commander for CLI argument parsing; declared in dependencies. ai
dependencies unvetted-dep:@adguard/logger AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
dependencies unvetted-dep:@adguard/re2-wasm AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
dependencies unvetted-dep:@adguard/tsurlfilter AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai

Versions (showing 100 of 9720)

Version Deps Published
3.2.20251111030042 10 / 27
3.2.20251111020035 10 / 27
3.2.20251111010042 10 / 27
3.2.20251111000042 10 / 27
3.2.20251110230034 10 / 27
3.2.20251110220035 10 / 27
3.2.20251110210041 10 / 27
3.2.20251110200035 10 / 27
3.2.20251110190036 10 / 27
3.2.20251110180039 10 / 27
3.2.20251110170037 10 / 27
3.2.20251110160037 10 / 27
3.2.20251110150142 10 / 27
3.2.20251110140036 10 / 27
3.2.20251110130036 10 / 27
3.2.20251110120042 10 / 27
3.2.20251110110054 10 / 27
3.2.20251110100041 10 / 27
3.2.20251110090429 10 / 27
3.2.20251110081307 10 / 27
3.2.20251110070036 10 / 27
3.2.20251110060044 10 / 27
3.2.20251110050036 10 / 27
3.2.20251110040036 10 / 27
3.2.20251110030041 10 / 27
3.2.20251110020037 10 / 27
3.2.20251110010042 10 / 27
3.2.20251110000043 10 / 27
3.2.20251109230037 10 / 27
3.2.20251109220036 10 / 27
3.2.20251109210041 10 / 27
3.2.20251109200036 10 / 27
3.2.20251109190036 10 / 27
3.2.20251109180041 10 / 27
3.2.20251109170038 10 / 27
3.2.20251109160037 10 / 27
3.2.20251109150041 10 / 27
3.2.20251109140036 10 / 27
3.2.20251109130037 10 / 27
3.2.20251109120040 10 / 27
3.2.20251109110037 10 / 27
3.2.20251109100037 10 / 27
3.2.20251109090041 10 / 27
3.2.20251109080036 10 / 27
3.2.20251109070035 10 / 27
3.2.20251109060040 10 / 27
3.2.20251109050035 10 / 27
3.2.20251109040035 10 / 27
3.2.20251109030041 10 / 27
3.2.20251109020036 10 / 27
3.2.20251109010041 10 / 27
3.2.20251109000041 10 / 27
3.2.20251108230036 10 / 27
3.2.20251108220036 10 / 27
3.2.20251108210041 10 / 27
3.2.20251108200035 10 / 27
3.2.20251108190035 10 / 27
3.2.20251108180040 10 / 27
3.2.20251108170036 10 / 27
3.2.20251108160035 10 / 27
3.2.20251108150040 10 / 27
3.2.20251108140036 10 / 27
3.2.20251108130036 10 / 27
3.2.20251108120039 10 / 27
3.2.20251108110035 10 / 27
3.2.20251108100037 10 / 27
3.2.20251108090040 10 / 27
3.2.20251108080036 10 / 27
3.2.20251108070036 10 / 27
3.2.20251108060039 10 / 27
3.2.20251108050036 10 / 27
3.2.20251108040036 10 / 27
3.2.20251108030042 10 / 27
3.2.20251108020036 10 / 27
3.2.20251108010041 10 / 27
3.2.20251108000044 10 / 27
3.2.20251107230035 10 / 27
3.2.20251107220035 10 / 27
3.2.20251107210040 10 / 27
3.2.20251107200035 10 / 27
3.2.20251107190035 10 / 27
3.2.20251107180039 10 / 27
3.2.20251107170036 10 / 27
3.2.20251107160041 10 / 27
3.2.20251107150154 10 / 27
3.2.20251107140035 10 / 27
3.2.20251107130038 10 / 27
3.2.20251107120040 10 / 27
3.2.20251107110034 10 / 27
3.2.20251107100035 10 / 27
3.2.20251107090041 10 / 27
3.2.20251107080038 10 / 27
3.2.20251107070036 10 / 27
3.2.20251107060042 10 / 27
3.2.20251107050036 10 / 27
3.2.20251107040037 10 / 27
3.2.20251107030041 10 / 27
3.2.20251107020036 10 / 27
3.2.20251107010041 10 / 27
3.2.20251107000043 10 / 27
Showing 100 of 9720 Next page →

v3.2.20251109190036

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v3.2.20251109070035

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v3.2.20251108110035

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v3.2.20251108080036

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.