← Home

@adguard/dnr-rulesets

npm

Utility to create AdGuard DNR rulesets for mv3 extensions

100
Versions
GPL-3.0-only
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures No source commit

Without SLSA provenance there is no cryptographic link between this tarball and the public source — the axios compromise (March 2026) relied on exactly this gap.

Maintainers

ameshkovmaximtopblakhard

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
source-diff obfuscated-file:dist/filters/local_script_rules.js AI (source-diff): This file contains AdGuard scriptlet filter rules — minified JS strings mapped to expanded implementations. This is expected content for an ad-blocking DNR ruleset package, not malicious obfuscation. ai
source-diff obfuscated-file:dist/filters/chromium-mv3/local_script_rules.js AI (source-diff): These files contain AdGuard's scriptlet lookup tables — minified ad-blocking JS used as object keys with expanded implementations as values. This is the package's documented design, not malicious obfuscation. ai
source-diff obfuscated-file:dist/filters/opera-mv3/local_script_rules.js AI (source-diff): Same as chromium-mv3 variant: AdGuard scriptlet lookup tables with minified keys and readable implementations. Expected build artifact for this package. ai
publish-pattern rapid-publish AI (publish-pattern): Package has 13,351 versions with timestamp-based version numbers, indicating a fully automated filter-list update pipeline. Rapid publishing is the normal operating mode for this package. ai
phantom-deps phantom-dep:chokidar AI (phantom-deps): CLI tool legitimately uses chokidar for file watching; declared in dependencies and referenced in config files. ai
dependencies unvetted-dep:@adguard/agtree AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
phantom-deps phantom-dep:@adguard/re2-wasm AI (phantom-deps): First-party AdGuard dependency declared in package.json; phantom-dep flag is a false positive for same-org packages. ai
phantom-deps phantom-dep:commander AI (phantom-deps): CLI tool legitimately uses commander for CLI argument parsing; declared in dependencies. ai
dependencies unvetted-dep:@adguard/logger AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
dependencies unvetted-dep:@adguard/re2-wasm AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
dependencies unvetted-dep:@adguard/tsurlfilter AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai

Versions (showing 100 of 9705)

Version Deps Published
3.2.20251207010048 10 / 27
3.2.20251207000048 10 / 27
3.2.20251206230043 10 / 27
3.2.20251206220045 10 / 27
3.2.20251206210043 10 / 27
3.2.20251206200042 10 / 27
3.2.20251206190041 10 / 27
3.2.20251206180041 10 / 27
3.2.20251206170043 10 / 27
3.2.20251206160041 10 / 27
3.2.20251206150043 10 / 27
3.2.20251206140045 10 / 27
3.2.20251206130041 10 / 27
3.2.20251206120043 10 / 27
3.2.20251206110042 10 / 27
3.2.20251206100042 10 / 27
3.2.20251206090044 10 / 27
3.2.20251206080042 10 / 27
3.2.20251206070042 10 / 27
3.2.20251206060044 10 / 27
3.2.20251206050041 10 / 27
3.2.20251206040041 10 / 27
3.2.20251206030043 10 / 27
3.2.20251206020041 10 / 27
3.2.20251206010047 10 / 27
3.2.20251206000044 10 / 27
3.2.20251205230041 10 / 27
3.2.20251205220041 10 / 27
3.2.20251205210042 10 / 27
3.2.20251205200452 10 / 27
3.2.20251205190042 10 / 27
3.2.20251205180227 10 / 27
3.2.20251205170045 10 / 27
3.2.20251205160046 10 / 27
3.2.20251205150628 10 / 27
3.2.20251205141709 10 / 27
3.2.20251205130257 10 / 27
3.2.20251205120041 10 / 27
3.2.20251205110042 10 / 27
3.2.20251205100108 10 / 27
3.2.20251205080043 10 / 27
3.2.20251205070040 10 / 27
3.2.20251205060044 10 / 27
3.2.20251205050047 10 / 27
3.2.20251205040045 10 / 27
3.2.20251205030042 10 / 27
3.2.20251205020039 10 / 27
3.2.20251205010042 10 / 27
3.2.20251205000047 10 / 27
3.2.20251204230042 10 / 27
3.2.20251204220053 10 / 27
3.2.20251204210044 10 / 27
3.2.20251204200402 10 / 27
3.2.20251204190042 10 / 27
3.2.20251204180041 10 / 27
3.2.20251204170041 10 / 27
3.2.20251204160046 10 / 27
3.2.20251204150056 10 / 27
3.2.20251204140045 10 / 27
3.2.20251204130045 10 / 27
3.2.20251204120043 10 / 27
3.2.20251204110043 10 / 27
3.2.20251204100050 10 / 27
3.2.20251204090053 10 / 27
3.2.20251204080042 10 / 27
3.2.20251204070042 10 / 27
3.2.20251204060046 10 / 27
3.2.20251204050042 10 / 27
3.2.20251204040041 10 / 27
3.2.20251204030104 10 / 27
3.2.20251204020043 10 / 27
3.2.20251204010044 10 / 27
3.2.20251204000047 10 / 27
3.2.20251203230040 10 / 27
3.2.20251203220041 10 / 27
3.2.20251203210042 10 / 27
3.2.20251203200041 10 / 27
3.2.20251203190041 10 / 27
3.2.20251203180042 10 / 27
3.2.20251203170426 10 / 27
3.2.20251203160045 10 / 27
3.2.20251203150043 10 / 27
3.2.20251203140048 10 / 27
3.2.20251203130049 10 / 27
3.2.20251203120050 10 / 27
3.2.20251203110051 10 / 27
3.2.20251203100046 10 / 27
3.2.20251203090048 10 / 27
3.2.20251203080046 10 / 27
3.2.20251203070044 10 / 27
3.2.20251203060049 10 / 27
3.2.20251203050045 10 / 27
3.2.20251203040044 10 / 27
3.2.20251203030047 10 / 27
3.2.20251203020046 10 / 27
3.2.20251203010050 10 / 27
3.2.20251203000044 10 / 27
3.2.20251202230042 10 / 27
3.2.20251202220041 10 / 27
3.2.20251202210044 10 / 27
Showing 100 of 9705 Next page →

v3.2.20251206190041

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v3.2.20251205220041

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v3.2.20251203200041

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v3.2.20251202220041

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.