← Home

@adguard/dnr-rulesets

Utility to create AdGuard DNR rulesets for mv3 extensions

100
Versions
GPL-3.0-only
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures No source commit

Without SLSA provenance there is no cryptographic link between this tarball and the public source — the axios compromise (March 2026) relied on exactly this gap.

Maintainers

ameshkovmaximtopblakhard

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
source-diff obfuscated-file:dist/filters/local_script_rules.js AI (source-diff): This file contains AdGuard scriptlet filter rules — minified JS strings mapped to expanded implementations. This is expected content for an ad-blocking DNR ruleset package, not malicious obfuscation. ai
source-diff obfuscated-file:dist/filters/chromium-mv3/local_script_rules.js AI (source-diff): These files contain AdGuard's scriptlet lookup tables — minified ad-blocking JS used as object keys with expanded implementations as values. This is the package's documented design, not malicious obfuscation. ai
source-diff obfuscated-file:dist/filters/opera-mv3/local_script_rules.js AI (source-diff): Same as chromium-mv3 variant: AdGuard scriptlet lookup tables with minified keys and readable implementations. Expected build artifact for this package. ai
publish-pattern rapid-publish AI (publish-pattern): Package has 13,351 versions with timestamp-based version numbers, indicating a fully automated filter-list update pipeline. Rapid publishing is the normal operating mode for this package. ai
phantom-deps phantom-dep:chokidar AI (phantom-deps): CLI tool legitimately uses chokidar for file watching; declared in dependencies and referenced in config files. ai
dependencies unvetted-dep:@adguard/agtree AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
phantom-deps phantom-dep:@adguard/re2-wasm AI (phantom-deps): First-party AdGuard dependency declared in package.json; phantom-dep flag is a false positive for same-org packages. ai
phantom-deps phantom-dep:commander AI (phantom-deps): CLI tool legitimately uses commander for CLI argument parsing; declared in dependencies. ai
dependencies unvetted-dep:@adguard/logger AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
dependencies unvetted-dep:@adguard/re2-wasm AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
dependencies unvetted-dep:@adguard/tsurlfilter AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai

Versions (showing 100 of 9700)

Version Deps Published
3.2.20251212180042 10 / 27
3.2.20251212170043 10 / 27
3.2.20251212160717 10 / 27
3.2.20251212150044 10 / 27
3.2.20251212140044 10 / 27
3.2.20251212130048 10 / 27
3.2.20251212120042 10 / 27
3.2.20251212110052 10 / 27
3.2.20251212100047 10 / 27
3.2.20251212090106 10 / 27
3.2.20251212080048 10 / 27
3.2.20251212070046 10 / 27
3.2.20251212060044 10 / 27
3.2.20251212050043 10 / 27
3.2.20251212040042 10 / 27
3.2.20251212030044 10 / 27
3.2.20251212020043 10 / 27
3.2.20251212010047 10 / 27
3.2.20251212000048 10 / 27
3.2.20251211230041 10 / 27
3.2.20251211220041 10 / 27
3.2.20251211210043 10 / 27
3.2.20251211200041 10 / 27
3.2.20251211190043 10 / 27
3.2.20251211180043 10 / 27
3.2.20251211170041 10 / 27
3.2.20251211160048 10 / 27
3.2.20251211150047 10 / 27
3.2.20251211140043 10 / 27
3.2.20251211130047 10 / 27
3.2.20251211120049 10 / 27
3.2.20251211110048 10 / 27
3.2.20251211100044 10 / 27
3.2.20251211092040 10 / 27
3.2.20251209190042 10 / 27
3.2.20251209180050 10 / 27
3.2.20251209170044 10 / 27
3.2.20251209160046 10 / 27
3.2.20251209150047 10 / 27
3.2.20251209140045 10 / 27
3.2.20251209130045 10 / 27
3.2.20251209120316 10 / 27
3.2.20251209110112 10 / 27
3.2.20251209100044 10 / 27
3.2.20251209090043 10 / 27
3.2.20251209080042 10 / 27
3.2.20251209070041 10 / 27
3.2.20251209060044 10 / 27
3.2.20251209050041 10 / 27
3.2.20251209040040 10 / 27
3.2.20251209030043 10 / 27
3.2.20251209020041 10 / 27
3.2.20251209010045 10 / 27
3.2.20251209000045 10 / 27
3.2.20251208230040 10 / 27
3.2.20251208220040 10 / 27
3.2.20251208210044 10 / 27
3.2.20251208200040 10 / 27
3.2.20251208190044 10 / 27
3.2.20251208180041 10 / 27
3.2.20251208170043 10 / 27
3.2.20251208160042 10 / 27
3.2.20251208150050 10 / 27
3.2.20251208140046 10 / 27
3.2.20251208130048 10 / 27
3.2.20251208120048 10 / 27
3.2.20251208110045 10 / 27
3.2.20251208100048 10 / 27
3.2.20251208090100 10 / 27
3.2.20251208080405 10 / 27
3.2.20251208070044 10 / 27
3.2.20251208060047 10 / 27
3.2.20251208050042 10 / 27
3.2.20251208040044 10 / 27
3.2.20251208030044 10 / 27
3.2.20251208020045 10 / 27
3.2.20251208010048 10 / 27
3.2.20251208000048 10 / 27
3.2.20251207230044 10 / 27
3.2.20251207220043 10 / 27
3.2.20251207210046 10 / 27
3.2.20251207200044 10 / 27
3.2.20251207190044 10 / 27
3.2.20251207180044 10 / 27
3.2.20251207170044 10 / 27
3.2.20251207160043 10 / 27
3.2.20251207150045 10 / 27
3.2.20251207140043 10 / 27
3.2.20251207130043 10 / 27
3.2.20251207120044 10 / 27
3.2.20251207110044 10 / 27
3.2.20251207100044 10 / 27
3.2.20251207090047 10 / 27
3.2.20251207080043 10 / 27
3.2.20251207070043 10 / 27
3.2.20251207060045 10 / 27
3.2.20251207050043 10 / 27
3.2.20251207040043 10 / 27
3.2.20251207030046 10 / 27
3.2.20251207020044 10 / 27
Showing 100 of 9700 Next page →
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.