← Home

@adguard/dnr-rulesets

npm

Utility to create AdGuard DNR rulesets for mv3 extensions

100
Versions
GPL-3.0-only
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures No source commit

Without SLSA provenance there is no cryptographic link between this tarball and the public source — the axios compromise (March 2026) relied on exactly this gap.

Maintainers

ameshkovmaximtopblakhard

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
source-diff obfuscated-file:dist/filters/local_script_rules.js AI (source-diff): This file contains AdGuard scriptlet filter rules — minified JS strings mapped to expanded implementations. This is expected content for an ad-blocking DNR ruleset package, not malicious obfuscation. ai
source-diff obfuscated-file:dist/filters/chromium-mv3/local_script_rules.js AI (source-diff): These files contain AdGuard's scriptlet lookup tables — minified ad-blocking JS used as object keys with expanded implementations as values. This is the package's documented design, not malicious obfuscation. ai
source-diff obfuscated-file:dist/filters/opera-mv3/local_script_rules.js AI (source-diff): Same as chromium-mv3 variant: AdGuard scriptlet lookup tables with minified keys and readable implementations. Expected build artifact for this package. ai
publish-pattern rapid-publish AI (publish-pattern): Package has 13,351 versions with timestamp-based version numbers, indicating a fully automated filter-list update pipeline. Rapid publishing is the normal operating mode for this package. ai
phantom-deps phantom-dep:chokidar AI (phantom-deps): CLI tool legitimately uses chokidar for file watching; declared in dependencies and referenced in config files. ai
dependencies unvetted-dep:@adguard/agtree AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
phantom-deps phantom-dep:@adguard/re2-wasm AI (phantom-deps): First-party AdGuard dependency declared in package.json; phantom-dep flag is a false positive for same-org packages. ai
phantom-deps phantom-dep:commander AI (phantom-deps): CLI tool legitimately uses commander for CLI argument parsing; declared in dependencies. ai
dependencies unvetted-dep:@adguard/logger AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
dependencies unvetted-dep:@adguard/re2-wasm AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
dependencies unvetted-dep:@adguard/tsurlfilter AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai

Versions (showing 100 of 9718)

Version Deps Published
3.2.20251115080041 10 / 27
3.2.20251115070041 10 / 27
3.2.20251115060042 10 / 27
3.2.20251115050040 10 / 27
3.2.20251115040040 10 / 27
3.2.20251115030042 10 / 27
3.2.20251115020040 10 / 27
3.2.20251115010047 10 / 27
3.2.20251115000043 10 / 27
3.2.20251114230040 10 / 27
3.2.20251114220039 10 / 27
3.2.20251114210041 10 / 27
3.2.20251114200039 10 / 27
3.2.20251114190039 10 / 27
3.2.20251114180039 10 / 27
3.2.20251114170046 10 / 27
3.2.20251114160125 10 / 27
3.2.20251114150043 10 / 27
3.2.20251114140044 10 / 27
3.2.20251114130050 10 / 27
3.2.20251114120057 10 / 27
3.2.20251114110044 10 / 27
3.2.20251114100334 10 / 27
3.2.20251114090043 10 / 27
3.2.20251114080047 10 / 27
3.2.20251114070039 10 / 27
3.2.20251114060044 10 / 27
3.2.20251114050040 10 / 27
3.2.20251114040040 10 / 27
3.2.20251114030041 10 / 27
3.2.20251114020531 10 / 27
3.2.20251114010045 10 / 27
3.2.20251114000126 10 / 27
3.2.20251113230039 10 / 27
3.2.20251113220039 10 / 27
3.2.20251113210043 10 / 27
3.2.20251113200040 10 / 27
3.2.20251113190042 10 / 27
3.2.20251113180042 10 / 27
3.2.20251113170041 10 / 27
3.2.20251113160040 10 / 27
3.2.20251113150044 10 / 27
3.2.20251113140039 10 / 27
3.2.20251113130042 10 / 27
3.2.20251113120046 10 / 27
3.2.20251113110425 10 / 27
3.2.20251113100041 10 / 27
3.2.20251113090042 10 / 27
3.2.20251113080044 10 / 27
3.2.20251113070041 10 / 27
3.2.20251113060044 10 / 27
3.2.20251113050040 10 / 27
3.2.20251113040040 10 / 27
3.2.20251113030041 10 / 27
3.2.20251113020545 10 / 27
3.2.20251113010047 10 / 27
3.2.20251113000047 10 / 27
3.2.20251112230039 10 / 27
3.2.20251112220038 10 / 27
3.2.20251112210041 10 / 27
3.2.20251112200038 10 / 27
3.2.20251112190039 10 / 27
3.2.20251112180122 10 / 27
3.2.20251112170039 10 / 27
3.2.20251112160040 10 / 27
3.2.20251112150044 10 / 27
3.2.20251112140815 10 / 27
3.2.20251112130038 10 / 27
3.2.20251112120045 10 / 27
3.2.20251112110044 10 / 27
3.2.20251112100035 10 / 27
3.2.20251112090042 10 / 27
3.2.20251112080037 10 / 27
3.2.20251112070035 10 / 27
3.2.20251112060212 10 / 27
3.2.20251112050034 10 / 27
3.2.20251112040035 10 / 27
3.2.20251112030042 10 / 27
3.2.20251112020214 10 / 27
3.2.20251112010041 10 / 27
3.2.20251112000044 10 / 27
3.2.20251111230036 10 / 27
3.2.20251111220035 10 / 27
3.2.20251111210042 10 / 27
3.2.20251111200039 10 / 27
3.2.20251111190034 10 / 27
3.2.20251111180043 10 / 27
3.2.20251111170036 10 / 27
3.2.20251111150050 10 / 27
3.2.20251111140039 10 / 27
3.2.20251111130043 10 / 27
3.2.20251111120102 10 / 27
3.2.20251111110039 10 / 27
3.2.20251111100034 10 / 27
3.2.20251111090041 10 / 27
3.2.20251111080040 10 / 27
3.2.20251111070038 10 / 27
3.2.20251111060041 10 / 27
3.2.20251111050034 10 / 27
3.2.20251111040035 10 / 27
Showing 100 of 9718 Next page →

v3.2.20251114170046

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v3.2.20251113220039

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v3.2.20251113040040

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.