← Home

@adguard/dnr-rulesets

npm

Utility to create AdGuard DNR rulesets for mv3 extensions

100
Versions
GPL-3.0-only
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures No source commit

Without SLSA provenance there is no cryptographic link between this tarball and the public source — the axios compromise (March 2026) relied on exactly this gap.

Maintainers

ameshkovmaximtopblakhard

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
source-diff obfuscated-file:dist/filters/local_script_rules.js AI (source-diff): This file contains AdGuard scriptlet filter rules — minified JS strings mapped to expanded implementations. This is expected content for an ad-blocking DNR ruleset package, not malicious obfuscation. ai
source-diff obfuscated-file:dist/filters/chromium-mv3/local_script_rules.js AI (source-diff): These files contain AdGuard's scriptlet lookup tables — minified ad-blocking JS used as object keys with expanded implementations as values. This is the package's documented design, not malicious obfuscation. ai
source-diff obfuscated-file:dist/filters/opera-mv3/local_script_rules.js AI (source-diff): Same as chromium-mv3 variant: AdGuard scriptlet lookup tables with minified keys and readable implementations. Expected build artifact for this package. ai
publish-pattern rapid-publish AI (publish-pattern): Package has 13,351 versions with timestamp-based version numbers, indicating a fully automated filter-list update pipeline. Rapid publishing is the normal operating mode for this package. ai
phantom-deps phantom-dep:chokidar AI (phantom-deps): CLI tool legitimately uses chokidar for file watching; declared in dependencies and referenced in config files. ai
dependencies unvetted-dep:@adguard/agtree AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
phantom-deps phantom-dep:@adguard/re2-wasm AI (phantom-deps): First-party AdGuard dependency declared in package.json; phantom-dep flag is a false positive for same-org packages. ai
phantom-deps phantom-dep:commander AI (phantom-deps): CLI tool legitimately uses commander for CLI argument parsing; declared in dependencies. ai
dependencies unvetted-dep:@adguard/logger AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
dependencies unvetted-dep:@adguard/re2-wasm AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
dependencies unvetted-dep:@adguard/tsurlfilter AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai

Versions (showing 100 of 9695)

Version Deps Published
3.2.20251221040041 10 / 27
3.2.20251221030041 10 / 27
3.2.20251221020041 10 / 27
3.2.20251221010045 10 / 27
3.2.20251221000043 10 / 27
3.2.20251220230042 10 / 27
3.2.20251220220041 10 / 27
3.2.20251220210042 10 / 27
3.2.20251220200041 10 / 27
3.2.20251220190041 10 / 27
3.2.20251220180042 10 / 27
3.2.20251220170041 10 / 27
3.2.20251220160041 10 / 27
3.2.20251220150043 10 / 27
3.2.20251220140041 10 / 27
3.2.20251220130041 10 / 27
3.2.20251220120041 10 / 27
3.2.20251220110040 10 / 27
3.2.20251220100041 10 / 27
3.2.20251220090043 10 / 27
3.2.20251220080040 10 / 27
3.2.20251220070042 10 / 27
3.2.20251220060042 10 / 27
3.2.20251220050041 10 / 27
3.2.20251220040040 10 / 27
3.2.20251220030042 10 / 27
3.2.20251220020040 10 / 27
3.2.20251220010047 10 / 27
3.2.20251220000044 10 / 27
3.2.20251219230040 10 / 27
3.2.20251219220040 10 / 27
3.2.20251219210045 10 / 27
3.2.20251219200044 10 / 27
3.2.20251219190042 10 / 27
3.2.20251219180042 10 / 27
3.2.20251219170045 10 / 27
3.2.20251219160050 10 / 27
3.2.20251219150100 10 / 27
3.2.20251219140045 10 / 27
3.2.20251219130056 10 / 27
3.2.20251219120044 10 / 27
3.2.20251219110043 10 / 27
3.2.20251219100048 10 / 27
3.2.20251219090041 10 / 27
3.2.20251219080049 10 / 27
3.2.20251219070039 10 / 27
3.2.20251219060043 10 / 27
3.2.20251219050039 10 / 27
3.2.20251219040040 10 / 27
3.2.20251219030041 10 / 27
3.2.20251219020041 10 / 27
3.2.20251219010043 10 / 27
3.2.20251219000046 10 / 27
3.2.20251218230042 10 / 27
3.2.20251218220040 10 / 27
3.2.20251218210043 10 / 27
3.2.20251218200041 10 / 27
3.2.20251218190040 10 / 27
3.2.20251218180048 10 / 27
3.2.20251218170040 10 / 27
3.2.20251218160040 10 / 27
3.2.20251218150044 10 / 27
3.2.20251218140042 10 / 27
3.2.20251218130043 10 / 27
3.2.20251218120046 10 / 27
3.2.20251218110043 10 / 27
3.2.20251218100046 10 / 27
3.2.20251218090143 10 / 27
3.2.20251218080044 10 / 27
3.2.20251218070253 10 / 27
3.2.20251218060047 10 / 27
3.2.20251218050044 10 / 27
3.2.20251218040041 10 / 27
3.2.20251218030043 10 / 27
3.2.20251218020041 10 / 27
3.2.20251218010045 10 / 27
3.2.20251218000048 10 / 27
3.2.20251217230043 10 / 27
3.2.20251217220040 10 / 27
3.2.20251217210042 10 / 27
3.2.20251217200041 10 / 27
3.2.20251217190042 10 / 27
3.2.20251217170050 10 / 27
3.2.20251217160050 10 / 27
3.2.20251217150521 10 / 27
3.2.20251217140043 10 / 27
3.2.20251217130044 10 / 27
3.2.20251217120045 10 / 27
3.2.20251217110050 10 / 27
3.2.20251217100046 10 / 27
3.2.20251217090054 10 / 27
3.2.20251217080047 10 / 27
3.2.20251217070042 10 / 27
3.2.20251217060045 10 / 27
3.2.20251217050041 10 / 27
3.2.20251217040041 10 / 27
3.2.20251217030041 10 / 27
3.2.20251217020041 10 / 27
3.2.20251217010046 10 / 27
3.2.20251217000047 10 / 27
Showing 100 of 9695 Next page →

v3.2.20251220230042

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v3.2.20251220150043

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v3.2.20251219080049

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v3.2.20251218110043

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.