← Home

@adguard/dnr-rulesets

npm

Utility to create AdGuard DNR rulesets for mv3 extensions

100
Versions
GPL-3.0-only
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures No source commit

Without SLSA provenance there is no cryptographic link between this tarball and the public source — the axios compromise (March 2026) relied on exactly this gap.

Maintainers

ameshkovmaximtopblakhard

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
source-diff obfuscated-file:dist/filters/local_script_rules.js AI (source-diff): This file contains AdGuard scriptlet filter rules — minified JS strings mapped to expanded implementations. This is expected content for an ad-blocking DNR ruleset package, not malicious obfuscation. ai
source-diff obfuscated-file:dist/filters/chromium-mv3/local_script_rules.js AI (source-diff): These files contain AdGuard's scriptlet lookup tables — minified ad-blocking JS used as object keys with expanded implementations as values. This is the package's documented design, not malicious obfuscation. ai
source-diff obfuscated-file:dist/filters/opera-mv3/local_script_rules.js AI (source-diff): Same as chromium-mv3 variant: AdGuard scriptlet lookup tables with minified keys and readable implementations. Expected build artifact for this package. ai
publish-pattern rapid-publish AI (publish-pattern): Package has 13,351 versions with timestamp-based version numbers, indicating a fully automated filter-list update pipeline. Rapid publishing is the normal operating mode for this package. ai
phantom-deps phantom-dep:chokidar AI (phantom-deps): CLI tool legitimately uses chokidar for file watching; declared in dependencies and referenced in config files. ai
dependencies unvetted-dep:@adguard/agtree AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
phantom-deps phantom-dep:@adguard/re2-wasm AI (phantom-deps): First-party AdGuard dependency declared in package.json; phantom-dep flag is a false positive for same-org packages. ai
phantom-deps phantom-dep:commander AI (phantom-deps): CLI tool legitimately uses commander for CLI argument parsing; declared in dependencies. ai
dependencies unvetted-dep:@adguard/logger AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
dependencies unvetted-dep:@adguard/re2-wasm AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
dependencies unvetted-dep:@adguard/tsurlfilter AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai

Versions (showing 100 of 9707)

Version Deps Published
3.2.20251202200043 10 / 27
3.2.20251202190045 10 / 27
3.2.20251202180043 10 / 27
3.2.20251202170045 10 / 27
3.2.20251202160043 10 / 27
3.2.20251202150055 10 / 27
3.2.20251202140054 10 / 27
3.2.20251202130047 10 / 27
3.2.20251202120043 10 / 27
3.2.20251202110043 10 / 27
3.2.20251202100044 10 / 27
3.2.20251202090044 10 / 27
3.2.20251202080057 10 / 27
3.2.20251202070044 10 / 27
3.2.20251202060046 10 / 27
3.2.20251202050044 10 / 27
3.2.20251202040044 10 / 27
3.2.20251202030046 10 / 27
3.2.20251202020044 10 / 27
3.2.20251202010049 10 / 27
3.2.20251202000049 10 / 27
3.2.20251201230043 10 / 27
3.2.20251201220043 10 / 27
3.2.20251201210045 10 / 27
3.2.20251201200043 10 / 27
3.2.20251201190044 10 / 27
3.2.20251201180043 10 / 27
3.2.20251201170042 10 / 27
3.2.20251201160456 10 / 27
3.2.20251201150243 10 / 27
3.2.20251201140454 10 / 27
3.2.20251201130047 10 / 27
3.2.20251201120317 10 / 27
3.2.20251201110045 10 / 27
3.2.20251201100043 10 / 27
3.2.20251201090045 10 / 27
3.2.20251201080042 10 / 27
3.2.20251201070043 10 / 27
3.2.20251201060045 10 / 27
3.2.20251201050040 10 / 27
3.2.20251201040041 10 / 27
3.2.20251201030042 10 / 27
3.2.20251201020041 10 / 27
3.2.20251201010044 10 / 27
3.2.20251201000046 10 / 27
3.2.20251130230040 10 / 27
3.2.20251130220042 10 / 27
3.2.20251130210043 10 / 27
3.2.20251130200226 10 / 27
3.2.20251130180041 10 / 27
3.2.20251130170042 10 / 27
3.2.20251130160043 10 / 27
3.2.20251130150042 10 / 27
3.2.20251130140042 10 / 27
3.2.20251130130041 10 / 27
3.2.20251130120041 10 / 27
3.2.20251130110041 10 / 27
3.2.20251130100043 10 / 27
3.2.20251130090042 10 / 27
3.2.20251130080039 10 / 27
3.2.20251130070041 10 / 27
3.2.20251130060041 10 / 27
3.2.20251130050040 10 / 27
3.2.20251130040040 10 / 27
3.2.20251130030041 10 / 27
3.2.20251130020040 10 / 27
3.2.20251130010045 10 / 27
3.2.20251130000043 10 / 27
3.2.20251129230040 10 / 27
3.2.20251129220040 10 / 27
3.2.20251129210042 10 / 27
3.2.20251129200041 10 / 27
3.2.20251129190039 10 / 27
3.2.20251129180041 10 / 27
3.2.20251129170041 10 / 27
3.2.20251129160040 10 / 27
3.2.20251129150042 10 / 27
3.2.20251129140041 10 / 27
3.2.20251129130041 10 / 27
3.2.20251129120041 10 / 27
3.2.20251129110042 10 / 27
3.2.20251129100040 10 / 27
3.2.20251129090043 10 / 27
3.2.20251129080040 10 / 27
3.2.20251129070041 10 / 27
3.2.20251129060042 10 / 27
3.2.20251129050040 10 / 27
3.2.20251129040040 10 / 27
3.2.20251129030043 10 / 27
3.2.20251129020040 10 / 27
3.2.20251129010046 10 / 27
3.2.20251129000042 10 / 27
3.2.20251128230041 10 / 27
3.2.20251128220050 10 / 27
3.2.20251128210041 10 / 27
3.2.20251128200041 10 / 27
3.2.20251128190041 10 / 27
3.2.20251128180509 10 / 27
3.2.20251128170144 10 / 27
3.2.20251128160045 10 / 27
Showing 100 of 9707 Next page →

v3.2.20251202050044

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v3.2.20251130220042

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v3.2.20251130000043

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v3.2.20251129220040

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v3.2.20251129110042

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.