← Home

@adguard/dnr-rulesets

npm

Utility to create AdGuard DNR rulesets for mv3 extensions

100
Versions
GPL-3.0-only
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures No source commit

Without SLSA provenance there is no cryptographic link between this tarball and the public source — the axios compromise (March 2026) relied on exactly this gap.

Maintainers

ameshkovmaximtopblakhard

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
source-diff obfuscated-file:dist/filters/local_script_rules.js AI (source-diff): This file contains AdGuard scriptlet filter rules — minified JS strings mapped to expanded implementations. This is expected content for an ad-blocking DNR ruleset package, not malicious obfuscation. ai
source-diff obfuscated-file:dist/filters/chromium-mv3/local_script_rules.js AI (source-diff): These files contain AdGuard's scriptlet lookup tables — minified ad-blocking JS used as object keys with expanded implementations as values. This is the package's documented design, not malicious obfuscation. ai
source-diff obfuscated-file:dist/filters/opera-mv3/local_script_rules.js AI (source-diff): Same as chromium-mv3 variant: AdGuard scriptlet lookup tables with minified keys and readable implementations. Expected build artifact for this package. ai
publish-pattern rapid-publish AI (publish-pattern): Package has 13,351 versions with timestamp-based version numbers, indicating a fully automated filter-list update pipeline. Rapid publishing is the normal operating mode for this package. ai
phantom-deps phantom-dep:chokidar AI (phantom-deps): CLI tool legitimately uses chokidar for file watching; declared in dependencies and referenced in config files. ai
dependencies unvetted-dep:@adguard/agtree AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
phantom-deps phantom-dep:@adguard/re2-wasm AI (phantom-deps): First-party AdGuard dependency declared in package.json; phantom-dep flag is a false positive for same-org packages. ai
phantom-deps phantom-dep:commander AI (phantom-deps): CLI tool legitimately uses commander for CLI argument parsing; declared in dependencies. ai
dependencies unvetted-dep:@adguard/logger AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
dependencies unvetted-dep:@adguard/re2-wasm AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
dependencies unvetted-dep:@adguard/tsurlfilter AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai

Versions (showing 100 of 9693)

Version Deps Published
3.2.20251225080047 10 / 27
3.2.20251225070040 10 / 27
3.2.20251225060044 10 / 27
3.2.20251225050041 10 / 27
3.2.20251225040040 10 / 27
3.2.20251225030043 10 / 27
3.2.20251225020041 10 / 27
3.2.20251225010045 10 / 27
3.2.20251225000051 10 / 27
3.2.20251224230051 10 / 27
3.2.20251224220040 10 / 27
3.2.20251224210051 10 / 27
3.2.20251224200043 10 / 27
3.2.20251224190043 10 / 27
3.2.20251224180043 10 / 27
3.2.20251224170042 10 / 27
3.2.20251224160054 10 / 27
3.2.20251224150048 10 / 27
3.2.20251224140059 10 / 27
3.2.20251224130056 10 / 27
3.2.20251224120042 10 / 27
3.2.20251224110048 10 / 27
3.2.20251224100057 10 / 27
3.2.20251224090044 10 / 27
3.2.20251224080040 10 / 27
3.2.20251224070040 10 / 27
3.2.20251224060044 10 / 27
3.2.20251224050041 10 / 27
3.2.20251224040040 10 / 27
3.2.20251224030041 10 / 27
3.2.20251224020040 10 / 27
3.2.20251224010044 10 / 27
3.2.20251224000046 10 / 27
3.2.20251223230041 10 / 27
3.2.20251223220043 10 / 27
3.2.20251223210048 10 / 27
3.2.20251223200040 10 / 27
3.2.20251223190041 10 / 27
3.2.20251223180043 10 / 27
3.2.20251223170044 10 / 27
3.2.20251223160052 10 / 27
3.2.20251223150045 10 / 27
3.2.20251223140041 10 / 27
3.2.20251223130046 10 / 27
3.2.20251223120043 10 / 27
3.2.20251223110042 10 / 27
3.2.20251223100040 10 / 27
3.2.20251223090045 10 / 27
3.2.20251223080052 10 / 27
3.2.20251223070044 10 / 27
3.2.20251223060043 10 / 27
3.2.20251223050042 10 / 27
3.2.20251223040043 10 / 27
3.2.20251223030042 10 / 27
3.2.20251223020041 10 / 27
3.2.20251223010044 10 / 27
3.2.20251223000047 10 / 27
3.2.20251222230039 10 / 27
3.2.20251222220041 10 / 27
3.2.20251222210042 10 / 27
3.2.20251222200043 10 / 27
3.2.20251222190042 10 / 27
3.2.20251222180044 10 / 27
3.2.20251222170707 10 / 27
3.2.20251222160057 10 / 27
3.2.20251222150046 10 / 27
3.2.20251222140045 10 / 27
3.2.20251222130055 10 / 27
3.2.20251222120045 10 / 27
3.2.20251222110046 10 / 27
3.2.20251222100044 10 / 27
3.2.20251222090045 10 / 27
3.2.20251222080047 10 / 27
3.2.20251222070044 10 / 27
3.2.20251222060044 10 / 27
3.2.20251222050039 10 / 27
3.2.20251222040040 10 / 27
3.2.20251222030041 10 / 27
3.2.20251222020041 10 / 27
3.2.20251222010043 10 / 27
3.2.20251222000044 10 / 27
3.2.20251221230041 10 / 27
3.2.20251221220041 10 / 27
3.2.20251221210042 10 / 27
3.2.20251221200040 10 / 27
3.2.20251221190040 10 / 27
3.2.20251221180048 10 / 27
3.2.20251221170044 10 / 27
3.2.20251221160040 10 / 27
3.2.20251221150041 10 / 27
3.2.20251221140041 10 / 27
3.2.20251221130041 10 / 27
3.2.20251221120041 10 / 27
3.2.20251221110041 10 / 27
3.2.20251221100041 10 / 27
3.2.20251221090042 10 / 27
3.2.20251221080040 10 / 27
3.2.20251221070039 10 / 27
3.2.20251221060041 10 / 27
3.2.20251221050040 10 / 27
Showing 100 of 9693 Next page →

v3.2.20251224000046

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v3.2.20251223050042

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v3.2.20251222060044

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v3.2.20251221170044

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.