← Home

@adguard/dnr-rulesets

Utility to create AdGuard DNR rulesets for mv3 extensions

100
Versions
GPL-3.0-only
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures No source commit

Without SLSA provenance there is no cryptographic link between this tarball and the public source — the axios compromise (March 2026) relied on exactly this gap.

Maintainers

ameshkovmaximtopblakhard

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
source-diff obfuscated-file:dist/filters/local_script_rules.js AI (source-diff): This file contains AdGuard scriptlet filter rules — minified JS strings mapped to expanded implementations. This is expected content for an ad-blocking DNR ruleset package, not malicious obfuscation. ai
source-diff obfuscated-file:dist/filters/chromium-mv3/local_script_rules.js AI (source-diff): These files contain AdGuard's scriptlet lookup tables — minified ad-blocking JS used as object keys with expanded implementations as values. This is the package's documented design, not malicious obfuscation. ai
source-diff obfuscated-file:dist/filters/opera-mv3/local_script_rules.js AI (source-diff): Same as chromium-mv3 variant: AdGuard scriptlet lookup tables with minified keys and readable implementations. Expected build artifact for this package. ai
publish-pattern rapid-publish AI (publish-pattern): Package has 13,351 versions with timestamp-based version numbers, indicating a fully automated filter-list update pipeline. Rapid publishing is the normal operating mode for this package. ai
phantom-deps phantom-dep:chokidar AI (phantom-deps): CLI tool legitimately uses chokidar for file watching; declared in dependencies and referenced in config files. ai
dependencies unvetted-dep:@adguard/agtree AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
phantom-deps phantom-dep:@adguard/re2-wasm AI (phantom-deps): First-party AdGuard dependency declared in package.json; phantom-dep flag is a false positive for same-org packages. ai
phantom-deps phantom-dep:commander AI (phantom-deps): CLI tool legitimately uses commander for CLI argument parsing; declared in dependencies. ai
dependencies unvetted-dep:@adguard/logger AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
dependencies unvetted-dep:@adguard/re2-wasm AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
dependencies unvetted-dep:@adguard/tsurlfilter AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai

Versions (showing 100 of 9674)

Version Deps Published
3.2.20260121070039 10 / 27
3.2.20260121060040 10 / 27
3.2.20260121050029 10 / 27
3.2.20260121040027 10 / 27
3.2.20260121030028 10 / 27
3.2.20260121020029 10 / 27
3.2.20260121000029 10 / 27
3.2.20260120230030 10 / 27
3.2.20260120220028 10 / 27
3.2.20260120210031 10 / 27
3.2.20260120200030 10 / 27
3.2.20260120180029 10 / 27
3.2.20260120170031 10 / 27
3.2.20260120160030 10 / 27
3.2.20260120150035 10 / 27
3.2.20260120140027 10 / 27
3.2.20260120130029 10 / 27
3.2.20260120120029 10 / 27
3.2.20260120110029 10 / 27
3.2.20260120100029 10 / 27
3.2.20260120090048 10 / 27
3.2.20260120080037 10 / 27
3.2.20260120070029 10 / 27
3.2.20260120060031 10 / 27
3.2.20260120050031 10 / 27
3.2.20260120040028 10 / 27
3.2.20260120030028 10 / 27
3.2.20260120020028 10 / 27
3.2.20260120010029 10 / 27
3.2.20260120000032 10 / 27
3.2.20260119230029 10 / 27
3.2.20260119220028 10 / 27
3.2.20260119210029 10 / 27
3.2.20260119200028 10 / 27
3.2.20260119190028 10 / 27
3.2.20260119180029 10 / 27
3.2.20260119170029 10 / 27
3.2.20260119160033 10 / 27
3.2.20260119150029 10 / 27
3.2.20260119140134 10 / 27
3.2.20260119130033 10 / 27
3.2.20260119120028 10 / 27
3.2.20260119110027 10 / 27
3.2.20260119100043 10 / 27
3.2.20260119090028 10 / 27
3.2.20260119080028 10 / 27
3.2.20260119070028 10 / 27
3.2.20260119060033 10 / 27
3.2.20260119050030 10 / 27
3.2.20260119040028 10 / 27
3.2.20260119030029 10 / 27
3.2.20260119020027 10 / 27
3.2.20260119010028 10 / 27
3.2.20260119000032 10 / 27
3.2.20260118230028 10 / 27
3.2.20260118220028 10 / 27
3.2.20260118210029 10 / 27
3.2.20260118200027 10 / 27
3.2.20260118190028 10 / 27
3.2.20260118180027 10 / 27
3.2.20260118170027 10 / 27
3.2.20260118160027 10 / 27
3.2.20260118150028 10 / 27
3.2.20260118140028 10 / 27
3.2.20260118130028 10 / 27
3.2.20260118120029 10 / 27
3.2.20260118110028 10 / 27
3.2.20260118100028 10 / 27
3.2.20260118090039 10 / 27
3.2.20260118080027 10 / 27
3.2.20260118070028 10 / 27
3.2.20260118060029 10 / 27
3.2.20260118050029 10 / 27
3.2.20260118040029 10 / 27
3.2.20260118030028 10 / 27
3.2.20260118020030 10 / 27
3.2.20260118010028 10 / 27
3.2.20260118000027 10 / 27
3.2.20260117230028 10 / 27
3.2.20260117220029 10 / 27
3.2.20260117210028 10 / 27
3.2.20260117200028 10 / 27
3.2.20260117190028 10 / 27
3.2.20260117180029 10 / 27
3.2.20260117170028 10 / 27
3.2.20260117160028 10 / 27
3.2.20260117150028 10 / 27
3.2.20260117140028 10 / 27
3.2.20260117130028 10 / 27
3.2.20260117120027 10 / 27
3.2.20260117110027 10 / 27
3.2.20260117100039 10 / 27
3.2.20260117090028 10 / 27
3.2.20260117080038 10 / 27
3.2.20260117070028 10 / 27
3.2.20260117060031 10 / 27
3.2.20260117050029 10 / 27
3.2.20260117040028 10 / 27
3.2.20260117030028 10 / 27
3.2.20260117020028 10 / 27
Showing 100 of 9674 Next page →
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.