← Home

@adguard/dnr-rulesets

npm

Utility to create AdGuard DNR rulesets for mv3 extensions

100
Versions
GPL-3.0-only
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures No source commit

Without SLSA provenance there is no cryptographic link between this tarball and the public source — the axios compromise (March 2026) relied on exactly this gap.

Maintainers

ameshkovmaximtopblakhard

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
source-diff obfuscated-file:dist/filters/local_script_rules.js AI (source-diff): This file contains AdGuard scriptlet filter rules — minified JS strings mapped to expanded implementations. This is expected content for an ad-blocking DNR ruleset package, not malicious obfuscation. ai
source-diff obfuscated-file:dist/filters/chromium-mv3/local_script_rules.js AI (source-diff): These files contain AdGuard's scriptlet lookup tables — minified ad-blocking JS used as object keys with expanded implementations as values. This is the package's documented design, not malicious obfuscation. ai
source-diff obfuscated-file:dist/filters/opera-mv3/local_script_rules.js AI (source-diff): Same as chromium-mv3 variant: AdGuard scriptlet lookup tables with minified keys and readable implementations. Expected build artifact for this package. ai
publish-pattern rapid-publish AI (publish-pattern): Package has 13,351 versions with timestamp-based version numbers, indicating a fully automated filter-list update pipeline. Rapid publishing is the normal operating mode for this package. ai
phantom-deps phantom-dep:chokidar AI (phantom-deps): CLI tool legitimately uses chokidar for file watching; declared in dependencies and referenced in config files. ai
dependencies unvetted-dep:@adguard/agtree AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
phantom-deps phantom-dep:@adguard/re2-wasm AI (phantom-deps): First-party AdGuard dependency declared in package.json; phantom-dep flag is a false positive for same-org packages. ai
phantom-deps phantom-dep:commander AI (phantom-deps): CLI tool legitimately uses commander for CLI argument parsing; declared in dependencies. ai
dependencies unvetted-dep:@adguard/logger AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
dependencies unvetted-dep:@adguard/re2-wasm AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
dependencies unvetted-dep:@adguard/tsurlfilter AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai

Versions (showing 100 of 9687)

Version Deps Published
3.2.20260102230040 10 / 27
3.2.20260102220042 10 / 27
3.2.20260102210043 10 / 27
3.2.20260102200041 10 / 27
3.2.20260102190041 10 / 27
3.2.20260102180041 10 / 27
3.2.20260102170040 10 / 27
3.2.20260102160040 10 / 27
3.2.20260102140040 10 / 27
3.2.20260102130042 10 / 27
3.2.20260102120043 10 / 27
3.2.20260102110042 10 / 27
3.2.20260102100042 10 / 27
3.2.20260102090042 10 / 27
3.2.20260102080041 10 / 27
3.2.20260102070041 10 / 27
3.2.20260102060045 10 / 27
3.2.20260102050042 10 / 27
3.2.20260102030042 10 / 27
3.2.20260102020040 10 / 27
3.2.20260102010045 10 / 27
3.2.20260102000043 10 / 27
3.2.20260101230042 10 / 27
3.2.20260101220041 10 / 27
3.2.20260101200041 10 / 27
3.2.20260101190041 10 / 27
3.2.20260101180041 10 / 27
3.2.20260101170041 10 / 27
3.2.20260101160041 10 / 27
3.2.20260101150042 10 / 27
3.2.20260101140041 10 / 27
3.2.20260101130041 10 / 27
3.2.20260101120041 10 / 27
3.2.20260101110040 10 / 27
3.2.20260101100040 10 / 27
3.2.20260101090041 10 / 27
3.2.20260101080040 10 / 27
3.2.20260101070040 10 / 27
3.2.20260101060044 10 / 27
3.2.20260101050040 10 / 27
3.2.20260101040040 10 / 27
3.2.20260101030042 10 / 27
3.2.20260101020041 10 / 27
3.2.20260101010044 10 / 27
3.2.20260101000044 10 / 27
3.2.20251231230040 10 / 27
3.2.20251231220040 10 / 27
3.2.20251231210041 10 / 27
3.2.20251231200039 10 / 27
3.2.20251231190040 10 / 27
3.2.20251231180039 10 / 27
3.2.20251231170040 10 / 27
3.2.20251231160040 10 / 27
3.2.20251231150041 10 / 27
3.2.20251231140040 10 / 27
3.2.20251231130041 10 / 27
3.2.20251231120040 10 / 27
3.2.20251231110040 10 / 27
3.2.20251231100041 10 / 27
3.2.20251231090041 10 / 27
3.2.20251231080041 10 / 27
3.2.20251231070040 10 / 27
3.2.20251231060043 10 / 27
3.2.20251231050041 10 / 27
3.2.20251231040041 10 / 27
3.2.20251231030042 10 / 27
3.2.20251231020041 10 / 27
3.2.20251231010045 10 / 27
3.2.20251231000047 10 / 27
3.2.20251230230039 10 / 27
3.2.20251230220042 10 / 27
3.2.20251230210042 10 / 27
3.2.20251230200041 10 / 27
3.2.20251230190041 10 / 27
3.2.20251230180042 10 / 27
3.2.20251230170045 10 / 27
3.2.20251230150042 10 / 27
3.2.20251230140042 10 / 27
3.2.20251230130043 10 / 27
3.2.20251230110044 10 / 27
3.2.20251230100043 10 / 27
3.2.20251230090042 10 / 27
3.2.20251230080048 10 / 27
3.2.20251230070040 10 / 27
3.2.20251230060044 10 / 27
3.2.20251230050040 10 / 27
3.2.20251230040040 10 / 27
3.2.20251230030043 10 / 27
3.2.20251230020040 10 / 27
3.2.20251230010045 10 / 27
3.2.20251230000045 10 / 27
3.2.20251229230041 10 / 27
3.2.20251229220040 10 / 27
3.2.20251229210043 10 / 27
3.2.20251229200042 10 / 27
3.2.20251229190041 10 / 27
3.2.20251229180042 10 / 27
3.2.20251229170042 10 / 27
3.2.20251229160040 10 / 27
3.2.20251229150045 10 / 27
Showing 100 of 9687 Next page →

v3.2.20260102120043

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v3.2.20260101070040

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v3.2.20251231140040

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v3.2.20251230200041

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v3.2.20251230090042

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.