← Home

@adguard/dnr-rulesets

npm

Utility to create AdGuard DNR rulesets for mv3 extensions

100
Versions
GPL-3.0-only
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures No source commit

Without SLSA provenance there is no cryptographic link between this tarball and the public source — the axios compromise (March 2026) relied on exactly this gap.

Maintainers

ameshkovmaximtopblakhard

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
source-diff obfuscated-file:dist/filters/local_script_rules.js AI (source-diff): This file contains AdGuard scriptlet filter rules — minified JS strings mapped to expanded implementations. This is expected content for an ad-blocking DNR ruleset package, not malicious obfuscation. ai
source-diff obfuscated-file:dist/filters/chromium-mv3/local_script_rules.js AI (source-diff): These files contain AdGuard's scriptlet lookup tables — minified ad-blocking JS used as object keys with expanded implementations as values. This is the package's documented design, not malicious obfuscation. ai
source-diff obfuscated-file:dist/filters/opera-mv3/local_script_rules.js AI (source-diff): Same as chromium-mv3 variant: AdGuard scriptlet lookup tables with minified keys and readable implementations. Expected build artifact for this package. ai
publish-pattern rapid-publish AI (publish-pattern): Package has 13,351 versions with timestamp-based version numbers, indicating a fully automated filter-list update pipeline. Rapid publishing is the normal operating mode for this package. ai
phantom-deps phantom-dep:chokidar AI (phantom-deps): CLI tool legitimately uses chokidar for file watching; declared in dependencies and referenced in config files. ai
dependencies unvetted-dep:@adguard/agtree AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
phantom-deps phantom-dep:@adguard/re2-wasm AI (phantom-deps): First-party AdGuard dependency declared in package.json; phantom-dep flag is a false positive for same-org packages. ai
phantom-deps phantom-dep:commander AI (phantom-deps): CLI tool legitimately uses commander for CLI argument parsing; declared in dependencies. ai
dependencies unvetted-dep:@adguard/logger AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
dependencies unvetted-dep:@adguard/re2-wasm AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
dependencies unvetted-dep:@adguard/tsurlfilter AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai

Versions (showing 100 of 9709)

Version Deps Published
3.2.20251128150052 10 / 27
3.2.20251128140044 10 / 27
3.2.20251128130040 10 / 27
3.2.20251128120042 10 / 27
3.2.20251128110044 10 / 27
3.2.20251128100049 10 / 27
3.2.20251128090043 10 / 27
3.2.20251128080043 10 / 27
3.2.20251128070040 10 / 27
3.2.20251128060045 10 / 27
3.2.20251128050041 10 / 27
3.2.20251128040040 10 / 27
3.2.20251128030041 10 / 27
3.2.20251128020042 10 / 27
3.2.20251128010055 10 / 27
3.2.20251128000054 10 / 27
3.2.20251127230043 10 / 27
3.2.20251127220333 10 / 27
3.2.20251127210042 10 / 27
3.2.20251127200040 10 / 27
3.2.20251127190043 10 / 27
3.2.20251127180043 10 / 27
3.2.20251127170041 10 / 27
3.2.20251127160405 10 / 27
3.2.20251127150046 10 / 27
3.2.20251127140045 10 / 27
3.2.20251127130045 10 / 27
3.2.20251127120044 10 / 27
3.2.20251127110148 10 / 27
3.2.20251127100048 10 / 27
3.2.20251127090044 10 / 27
3.2.20251127080041 10 / 27
3.2.20251127070042 10 / 27
3.2.20251127060041 10 / 27
3.2.20251127050040 10 / 27
3.2.20251127040040 10 / 27
3.2.20251127030043 10 / 27
3.2.20251127020040 10 / 27
3.2.20251127010046 10 / 27
3.2.20251127000044 10 / 27
3.2.20251126230039 10 / 27
3.2.20251126220041 10 / 27
3.2.20251126210042 10 / 27
3.2.20251126200040 10 / 27
3.2.20251126190041 10 / 27
3.2.20251126180040 10 / 27
3.2.20251126170043 10 / 27
3.2.20251126160043 10 / 27
3.2.20251126150047 10 / 27
3.2.20251126140608 10 / 27
3.2.20251126130315 10 / 27
3.2.20251126120043 10 / 27
3.2.20251126110101 10 / 27
3.2.20251126100042 10 / 27
3.2.20251126090045 10 / 27
3.2.20251126083520 10 / 27
3.2.20251126074616 10 / 27
3.2.20251125110043 10 / 27
3.2.20251125100206 10 / 27
3.2.20251125090043 10 / 27
3.2.20251125080855 10 / 27
3.2.20251125070040 10 / 27
3.2.20251125060052 10 / 27
3.2.20251125050041 10 / 27
3.2.20251125040040 10 / 27
3.2.20251125030043 10 / 27
3.2.20251125020042 10 / 27
3.2.20251125010047 10 / 27
3.2.20251125000123 10 / 27
3.2.20251124230041 10 / 27
3.2.20251124220041 10 / 27
3.2.20251124210042 10 / 27
3.2.20251124200041 10 / 27
3.2.20251124190049 10 / 27
3.2.20251124180041 10 / 27
3.2.20251124170043 10 / 27
3.2.20251124160059 10 / 27
3.2.20251124150045 10 / 27
3.2.20251124140058 10 / 27
3.2.20251124130043 10 / 27
3.2.20251124120649 10 / 27
3.2.20251124110045 10 / 27
3.2.20251124100045 10 / 27
3.2.20251124090041 10 / 27
3.2.20251124080041 10 / 27
3.2.20251124070041 10 / 27
3.2.20251124060043 10 / 27
3.2.20251124050040 10 / 27
3.2.20251124040040 10 / 27
3.2.20251124030041 10 / 27
3.2.20251124020041 10 / 27
3.2.20251124010045 10 / 27
3.2.20251124000044 10 / 27
3.2.20251123230041 10 / 27
3.2.20251123220041 10 / 27
3.2.20251123210042 10 / 27
3.2.20251123200042 10 / 27
3.2.20251123190040 10 / 27
3.2.20251123180043 10 / 27
3.2.20251123170041 10 / 27
Showing 100 of 9709 Next page →

v3.2.20251124220041

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v3.2.20251124100045

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v3.2.20251123190040

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.