← Home

@adguard/dnr-rulesets

npm

Utility to create AdGuard DNR rulesets for mv3 extensions

100
Versions
GPL-3.0-only
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures No source commit

Without SLSA provenance there is no cryptographic link between this tarball and the public source — the axios compromise (March 2026) relied on exactly this gap.

Maintainers

ameshkovmaximtopblakhard

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
source-diff obfuscated-file:dist/filters/local_script_rules.js AI (source-diff): This file contains AdGuard scriptlet filter rules — minified JS strings mapped to expanded implementations. This is expected content for an ad-blocking DNR ruleset package, not malicious obfuscation. ai
source-diff obfuscated-file:dist/filters/chromium-mv3/local_script_rules.js AI (source-diff): These files contain AdGuard's scriptlet lookup tables — minified ad-blocking JS used as object keys with expanded implementations as values. This is the package's documented design, not malicious obfuscation. ai
source-diff obfuscated-file:dist/filters/opera-mv3/local_script_rules.js AI (source-diff): Same as chromium-mv3 variant: AdGuard scriptlet lookup tables with minified keys and readable implementations. Expected build artifact for this package. ai
publish-pattern rapid-publish AI (publish-pattern): Package has 13,351 versions with timestamp-based version numbers, indicating a fully automated filter-list update pipeline. Rapid publishing is the normal operating mode for this package. ai
phantom-deps phantom-dep:chokidar AI (phantom-deps): CLI tool legitimately uses chokidar for file watching; declared in dependencies and referenced in config files. ai
dependencies unvetted-dep:@adguard/agtree AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
phantom-deps phantom-dep:@adguard/re2-wasm AI (phantom-deps): First-party AdGuard dependency declared in package.json; phantom-dep flag is a false positive for same-org packages. ai
phantom-deps phantom-dep:commander AI (phantom-deps): CLI tool legitimately uses commander for CLI argument parsing; declared in dependencies. ai
dependencies unvetted-dep:@adguard/logger AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
dependencies unvetted-dep:@adguard/re2-wasm AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
dependencies unvetted-dep:@adguard/tsurlfilter AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai

Versions (showing 100 of 9710)

Version Deps Published
3.2.20251123160042 10 / 27
3.2.20251123150041 10 / 27
3.2.20251123140041 10 / 27
3.2.20251123130041 10 / 27
3.2.20251123120041 10 / 27
3.2.20251123110040 10 / 27
3.2.20251123100042 10 / 27
3.2.20251123090044 10 / 27
3.2.20251123080039 10 / 27
3.2.20251123070039 10 / 27
3.2.20251123060041 10 / 27
3.2.20251123050039 10 / 27
3.2.20251123040039 10 / 27
3.2.20251123030102 10 / 27
3.2.20251123020041 10 / 27
3.2.20251123010043 10 / 27
3.2.20251123000041 10 / 27
3.2.20251122230043 10 / 27
3.2.20251122220040 10 / 27
3.2.20251122210041 10 / 27
3.2.20251122200039 10 / 27
3.2.20251122190039 10 / 27
3.2.20251122180039 10 / 27
3.2.20251122170040 10 / 27
3.2.20251122160040 10 / 27
3.2.20251122150040 10 / 27
3.2.20251122140039 10 / 27
3.2.20251122130041 10 / 27
3.2.20251122120039 10 / 27
3.2.20251122110040 10 / 27
3.2.20251122100040 10 / 27
3.2.20251122090041 10 / 27
3.2.20251122080039 10 / 27
3.2.20251122070039 10 / 27
3.2.20251122060041 10 / 27
3.2.20251122050039 10 / 27
3.2.20251122040039 10 / 27
3.2.20251122030040 10 / 27
3.2.20251122020040 10 / 27
3.2.20251122010045 10 / 27
3.2.20251122000044 10 / 27
3.2.20251121230040 10 / 27
3.2.20251121220039 10 / 27
3.2.20251121210042 10 / 27
3.2.20251121200042 10 / 27
3.2.20251121190041 10 / 27
3.2.20251121180041 10 / 27
3.2.20251121170127 10 / 27
3.2.20251121160041 10 / 27
3.2.20251121150044 10 / 27
3.2.20251121140107 10 / 27
3.2.20251121132454 10 / 27
3.2.20251121120046 10 / 27
3.2.20251121110049 10 / 27
3.2.20251121101433 10 / 27
3.2.20251121090323 10 / 27
3.2.20251121080043 10 / 27
3.2.20251121070042 10 / 27
3.2.20251121060130 10 / 27
3.2.20251121050041 10 / 27
3.2.20251121040042 10 / 27
3.2.20251121030041 10 / 27
3.2.20251121020041 10 / 27
3.2.20251121010047 10 / 27
3.2.20251121000046 10 / 27
3.2.20251120230040 10 / 27
3.2.20251120220041 10 / 27
3.2.20251120210043 10 / 27
3.2.20251120200043 10 / 27
3.2.20251120190041 10 / 27
3.2.20251120180042 10 / 27
3.2.20251120170041 10 / 27
3.2.20251120160046 10 / 27
3.2.20251120150044 10 / 27
3.2.20251120140425 10 / 27
3.2.20251120130759 10 / 27
3.2.20251120120042 10 / 27
3.2.20251120110350 10 / 27
3.2.20251120100051 10 / 27
3.2.20251120090044 10 / 27
3.2.20251120080353 10 / 27
3.2.20251120070039 10 / 27
3.2.20251120060044 10 / 27
3.2.20251120050041 10 / 27
3.2.20251120040039 10 / 27
3.2.20251120030041 10 / 27
3.2.20251120020041 10 / 27
3.2.20251120010047 10 / 27
3.2.20251120000044 10 / 27
3.2.20251119230041 10 / 27
3.2.20251119220041 10 / 27
3.2.20251119210044 10 / 27
3.2.20251119200041 10 / 27
3.2.20251119190041 10 / 27
3.2.20251119180048 10 / 27
3.2.20251119170042 10 / 27
3.2.20251119160043 10 / 27
3.2.20251119150108 10 / 27
3.2.20251119140141 10 / 27
3.2.20251119130045 10 / 27
Showing 100 of 9710 Next page →

v3.2.20251122000044

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v3.2.20251121050041

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v3.2.20251120130759

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.