← Home

@adguard/dnr-rulesets

npm

Utility to create AdGuard DNR rulesets for mv3 extensions

100
Versions
GPL-3.0-only
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures No source commit

Without SLSA provenance there is no cryptographic link between this tarball and the public source — the axios compromise (March 2026) relied on exactly this gap.

Maintainers

ameshkovmaximtopblakhard

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
source-diff obfuscated-file:dist/filters/local_script_rules.js AI (source-diff): This file contains AdGuard scriptlet filter rules — minified JS strings mapped to expanded implementations. This is expected content for an ad-blocking DNR ruleset package, not malicious obfuscation. ai
source-diff obfuscated-file:dist/filters/chromium-mv3/local_script_rules.js AI (source-diff): These files contain AdGuard's scriptlet lookup tables — minified ad-blocking JS used as object keys with expanded implementations as values. This is the package's documented design, not malicious obfuscation. ai
source-diff obfuscated-file:dist/filters/opera-mv3/local_script_rules.js AI (source-diff): Same as chromium-mv3 variant: AdGuard scriptlet lookup tables with minified keys and readable implementations. Expected build artifact for this package. ai
publish-pattern rapid-publish AI (publish-pattern): Package has 13,351 versions with timestamp-based version numbers, indicating a fully automated filter-list update pipeline. Rapid publishing is the normal operating mode for this package. ai
phantom-deps phantom-dep:chokidar AI (phantom-deps): CLI tool legitimately uses chokidar for file watching; declared in dependencies and referenced in config files. ai
dependencies unvetted-dep:@adguard/agtree AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
phantom-deps phantom-dep:@adguard/re2-wasm AI (phantom-deps): First-party AdGuard dependency declared in package.json; phantom-dep flag is a false positive for same-org packages. ai
phantom-deps phantom-dep:commander AI (phantom-deps): CLI tool legitimately uses commander for CLI argument parsing; declared in dependencies. ai
dependencies unvetted-dep:@adguard/logger AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
dependencies unvetted-dep:@adguard/re2-wasm AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
dependencies unvetted-dep:@adguard/tsurlfilter AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai

Versions (showing 100 of 9712)

Version Deps Published
3.2.20251119120044 10 / 27
3.2.20251119110044 10 / 27
3.2.20251119100340 10 / 27
3.2.20251119090043 10 / 27
3.2.20251119080050 10 / 27
3.2.20251119070041 10 / 27
3.2.20251119060043 10 / 27
3.2.20251119050040 10 / 27
3.2.20251119040040 10 / 27
3.2.20251119030042 10 / 27
3.2.20251119020041 10 / 27
3.2.20251119010045 10 / 27
3.2.20251119000045 10 / 27
3.2.20251118230041 10 / 27
3.2.20251118220041 10 / 27
3.2.20251118210043 10 / 27
3.2.20251118200041 10 / 27
3.2.20251118190044 10 / 27
3.2.20251118180041 10 / 27
3.2.20251118170042 10 / 27
3.2.20251118160041 10 / 27
3.2.20251118150046 10 / 27
3.2.20251118140042 10 / 27
3.2.20251118130051 10 / 27
3.2.20251118120046 10 / 27
3.2.20251118110140 10 / 27
3.2.20251118100040 10 / 27
3.2.20251118090046 10 / 27
3.2.20251118080041 10 / 27
3.2.20251118070038 10 / 27
3.2.20251118060041 10 / 27
3.2.20251118050038 10 / 27
3.2.20251118040039 10 / 27
3.2.20251118030042 10 / 27
3.2.20251118020040 10 / 27
3.2.20251118010042 10 / 27
3.2.20251118000043 10 / 27
3.2.20251117230040 10 / 27
3.2.20251117220039 10 / 27
3.2.20251117210042 10 / 27
3.2.20251117200042 10 / 27
3.2.20251117190040 10 / 27
3.2.20251117180050 10 / 27
3.2.20251117170040 10 / 27
3.2.20251117160041 10 / 27
3.2.20251117150042 10 / 27
3.2.20251117141036 10 / 27
3.2.20251117130039 10 / 27
3.2.20251117120349 10 / 27
3.2.20251117110039 10 / 27
3.2.20251117100044 10 / 27
3.2.20251117090045 10 / 27
3.2.20251117080047 10 / 27
3.2.20251117070043 10 / 27
3.2.20251117060046 10 / 27
3.2.20251117050038 10 / 27
3.2.20251117040038 10 / 27
3.2.20251117030040 10 / 27
3.2.20251117020039 10 / 27
3.2.20251117010043 10 / 27
3.2.20251117000042 10 / 27
3.2.20251116230040 10 / 27
3.2.20251116220039 10 / 27
3.2.20251116210041 10 / 27
3.2.20251116200039 10 / 27
3.2.20251116190040 10 / 27
3.2.20251116180042 10 / 27
3.2.20251116170039 10 / 27
3.2.20251116160041 10 / 27
3.2.20251116150041 10 / 27
3.2.20251116140039 10 / 27
3.2.20251116130039 10 / 27
3.2.20251116120039 10 / 27
3.2.20251116110039 10 / 27
3.2.20251116100040 10 / 27
3.2.20251116090041 10 / 27
3.2.20251116080039 10 / 27
3.2.20251116070038 10 / 27
3.2.20251116060040 10 / 27
3.2.20251116050040 10 / 27
3.2.20251116040039 10 / 27
3.2.20251116030040 10 / 27
3.2.20251116020040 10 / 27
3.2.20251116010044 10 / 27
3.2.20251116000042 10 / 27
3.2.20251115230039 10 / 27
3.2.20251115220040 10 / 27
3.2.20251115210041 10 / 27
3.2.20251115200039 10 / 27
3.2.20251115190040 10 / 27
3.2.20251115180040 10 / 27
3.2.20251115170040 10 / 27
3.2.20251115160040 10 / 27
3.2.20251115150041 10 / 27
3.2.20251115140040 10 / 27
3.2.20251115130040 10 / 27
3.2.20251115120043 10 / 27
3.2.20251115110040 10 / 27
3.2.20251115100041 10 / 27
3.2.20251115090042 10 / 27
Showing 100 of 9712 Next page →

v3.2.20251119030042

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v3.2.20251118080041

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v3.2.20251118030042

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v3.2.20251117030040

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v3.2.20251115130040

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.