← Home

@adguard/dnr-rulesets

npm

Utility to create AdGuard DNR rulesets for mv3 extensions

100
Versions
GPL-3.0-only
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures No source commit

Without SLSA provenance there is no cryptographic link between this tarball and the public source — the axios compromise (March 2026) relied on exactly this gap.

Maintainers

ameshkovmaximtopblakhard

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
source-diff obfuscated-file:dist/filters/local_script_rules.js AI (source-diff): This file contains AdGuard scriptlet filter rules — minified JS strings mapped to expanded implementations. This is expected content for an ad-blocking DNR ruleset package, not malicious obfuscation. ai
source-diff obfuscated-file:dist/filters/chromium-mv3/local_script_rules.js AI (source-diff): These files contain AdGuard's scriptlet lookup tables — minified ad-blocking JS used as object keys with expanded implementations as values. This is the package's documented design, not malicious obfuscation. ai
source-diff obfuscated-file:dist/filters/opera-mv3/local_script_rules.js AI (source-diff): Same as chromium-mv3 variant: AdGuard scriptlet lookup tables with minified keys and readable implementations. Expected build artifact for this package. ai
publish-pattern rapid-publish AI (publish-pattern): Package has 13,351 versions with timestamp-based version numbers, indicating a fully automated filter-list update pipeline. Rapid publishing is the normal operating mode for this package. ai
phantom-deps phantom-dep:chokidar AI (phantom-deps): CLI tool legitimately uses chokidar for file watching; declared in dependencies and referenced in config files. ai
dependencies unvetted-dep:@adguard/agtree AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
phantom-deps phantom-dep:@adguard/re2-wasm AI (phantom-deps): First-party AdGuard dependency declared in package.json; phantom-dep flag is a false positive for same-org packages. ai
phantom-deps phantom-dep:commander AI (phantom-deps): CLI tool legitimately uses commander for CLI argument parsing; declared in dependencies. ai
dependencies unvetted-dep:@adguard/logger AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
dependencies unvetted-dep:@adguard/re2-wasm AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
dependencies unvetted-dep:@adguard/tsurlfilter AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai

Versions (showing 100 of 9697)

Version Deps Published
3.2.20251216230041 10 / 27
3.2.20251216220042 10 / 27
3.2.20251216211320 10 / 27
3.2.20251216200042 10 / 27
3.2.20251216190129 10 / 27
3.2.20251216180042 10 / 27
3.2.20251216170043 10 / 27
3.2.20251216161604 10 / 27
3.2.20251216150054 10 / 27
3.2.20251216140117 10 / 27
3.2.20251216130046 10 / 27
3.2.20251216120045 10 / 27
3.2.20251216110044 10 / 27
3.2.20251216100046 10 / 27
3.2.20251216090048 10 / 27
3.2.20251216080045 10 / 27
3.2.20251216070042 10 / 27
3.2.20251216060044 10 / 27
3.2.20251216050041 10 / 27
3.2.20251216040041 10 / 27
3.2.20251216030044 10 / 27
3.2.20251216020043 10 / 27
3.2.20251216010046 10 / 27
3.2.20251216000048 10 / 27
3.2.20251215230048 10 / 27
3.2.20251215220041 10 / 27
3.2.20251215210044 10 / 27
3.2.20251215200042 10 / 27
3.2.20251215180042 10 / 27
3.2.20251215170048 10 / 27
3.2.20251215160049 10 / 27
3.2.20251215150046 10 / 27
3.2.20251215140045 10 / 27
3.2.20251215130615 10 / 27
3.2.20251215120046 10 / 27
3.2.20251215110048 10 / 27
3.2.20251215100045 10 / 27
3.2.20251215090044 10 / 27
3.2.20251215080049 10 / 27
3.2.20251215070043 10 / 27
3.2.20251215060046 10 / 27
3.2.20251215050042 10 / 27
3.2.20251215040044 10 / 27
3.2.20251215030044 10 / 27
3.2.20251215020043 10 / 27
3.2.20251215010046 10 / 27
3.2.20251215000047 10 / 27
3.2.20251214230042 10 / 27
3.2.20251214220044 10 / 27
3.2.20251214210045 10 / 27
3.2.20251214200043 10 / 27
3.2.20251214190044 10 / 27
3.2.20251214180044 10 / 27
3.2.20251214170043 10 / 27
3.2.20251214160043 10 / 27
3.2.20251214150044 10 / 27
3.2.20251214140043 10 / 27
3.2.20251214130044 10 / 27
3.2.20251214120043 10 / 27
3.2.20251214110042 10 / 27
3.2.20251214100043 10 / 27
3.2.20251214090044 10 / 27
3.2.20251214080043 10 / 27
3.2.20251214070042 10 / 27
3.2.20251214060042 10 / 27
3.2.20251214050043 10 / 27
3.2.20251214040042 10 / 27
3.2.20251214030044 10 / 27
3.2.20251214020043 10 / 27
3.2.20251214010047 10 / 27
3.2.20251214000045 10 / 27
3.2.20251213230043 10 / 27
3.2.20251213220042 10 / 27
3.2.20251213210044 10 / 27
3.2.20251213200043 10 / 27
3.2.20251213190043 10 / 27
3.2.20251213180043 10 / 27
3.2.20251213170043 10 / 27
3.2.20251213160043 10 / 27
3.2.20251213150044 10 / 27
3.2.20251213140044 10 / 27
3.2.20251213130044 10 / 27
3.2.20251213120043 10 / 27
3.2.20251213110044 10 / 27
3.2.20251213100043 10 / 27
3.2.20251213090045 10 / 27
3.2.20251213080044 10 / 27
3.2.20251213070044 10 / 27
3.2.20251213060044 10 / 27
3.2.20251213050044 10 / 27
3.2.20251213040043 10 / 27
3.2.20251213030045 10 / 27
3.2.20251213020043 10 / 27
3.2.20251213010049 10 / 27
3.2.20251213000044 10 / 27
3.2.20251212230041 10 / 27
3.2.20251212220041 10 / 27
3.2.20251212210043 10 / 27
3.2.20251212200041 10 / 27
3.2.20251212190042 10 / 27
Showing 100 of 9697 Next page →

v3.2.20251216030044

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v3.2.20251215040044

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v3.2.20251213060044

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.