← Home

@adguard/dnr-rulesets

npm

Utility to create AdGuard DNR rulesets for mv3 extensions

100
Versions
GPL-3.0-only
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures No source commit

Without SLSA provenance there is no cryptographic link between this tarball and the public source — the axios compromise (March 2026) relied on exactly this gap.

Maintainers

ameshkovmaximtopblakhard

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
source-diff obfuscated-file:dist/filters/local_script_rules.js AI (source-diff): This file contains AdGuard scriptlet filter rules — minified JS strings mapped to expanded implementations. This is expected content for an ad-blocking DNR ruleset package, not malicious obfuscation. ai
source-diff obfuscated-file:dist/filters/chromium-mv3/local_script_rules.js AI (source-diff): These files contain AdGuard's scriptlet lookup tables — minified ad-blocking JS used as object keys with expanded implementations as values. This is the package's documented design, not malicious obfuscation. ai
source-diff obfuscated-file:dist/filters/opera-mv3/local_script_rules.js AI (source-diff): Same as chromium-mv3 variant: AdGuard scriptlet lookup tables with minified keys and readable implementations. Expected build artifact for this package. ai
publish-pattern rapid-publish AI (publish-pattern): Package has 13,351 versions with timestamp-based version numbers, indicating a fully automated filter-list update pipeline. Rapid publishing is the normal operating mode for this package. ai
phantom-deps phantom-dep:chokidar AI (phantom-deps): CLI tool legitimately uses chokidar for file watching; declared in dependencies and referenced in config files. ai
dependencies unvetted-dep:@adguard/agtree AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
phantom-deps phantom-dep:@adguard/re2-wasm AI (phantom-deps): First-party AdGuard dependency declared in package.json; phantom-dep flag is a false positive for same-org packages. ai
phantom-deps phantom-dep:commander AI (phantom-deps): CLI tool legitimately uses commander for CLI argument parsing; declared in dependencies. ai
dependencies unvetted-dep:@adguard/logger AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
dependencies unvetted-dep:@adguard/re2-wasm AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
dependencies unvetted-dep:@adguard/tsurlfilter AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai

Versions (showing 100 of 9651)

Version Deps Published
3.3.20260129230029 10 / 29
3.3.20260129220030 10 / 29
3.3.20260129210031 10 / 29
3.3.20260129200030 10 / 29
3.3.20260129190031 10 / 29
3.3.20260129180030 10 / 29
3.3.20260129170033 10 / 29
3.3.20260129160031 10 / 29
3.3.20260129150030 10 / 29
3.3.20260129140034 10 / 29
3.3.20260129130035 10 / 29
3.3.20260129120032 10 / 29
3.3.20260129110030 10 / 29
3.3.20260129100036 10 / 29
3.3.20260129094653 10 / 29
3.3.20260129090033 10 / 29
3.3.20260129080032 10 / 29
3.3.20260129070032 10 / 29
3.3.20260129060030 10 / 29
3.3.20260129050032 10 / 29
3.3.20260129040031 10 / 29
3.3.20260129030032 10 / 29
3.3.20260129020033 10 / 29
3.3.20260129010031 10 / 29
3.3.20260129000044 10 / 29
3.3.20260128230028 10 / 29
3.3.20260128220034 10 / 29
3.3.20260128210036 10 / 29
3.3.20260128205008 10 / 29
3.3.20260128183911 10 / 29
3.3.20260128153734 10 / 29
3.3.1 10 / 29
3.2.20260225160106 10 / 27
3.2.20260225150101 10 / 27
3.2.20260225140056 10 / 27
3.2.20260225130053 10 / 27
3.2.20260225120100 10 / 27
3.2.20260225110054 10 / 27
3.2.20260225100110 10 / 27
3.2.20260225090104 10 / 27
3.2.20260225070051 10 / 27
3.2.20260225060156 10 / 27
3.2.20260225050058 10 / 27
3.2.20260225040052 10 / 27
3.2.20260225030052 10 / 27
3.2.20260225010049 10 / 27
3.2.20260225000106 10 / 27
3.2.20260224230054 10 / 27
3.2.20260224220053 10 / 27
3.2.20260224210049 10 / 27
3.2.20260224200110 10 / 27
3.2.20260224190100 10 / 27
3.2.20260224170105 10 / 27
3.2.20260224160057 10 / 27
3.2.20260224140056 10 / 27
3.2.20260224130121 10 / 27
3.2.20260224120100 10 / 27
3.2.20260224110056 10 / 27
3.2.20260224090135 10 / 27
3.2.20260224080119 10 / 27
3.2.20260224070110 10 / 27
3.2.20260224060122 10 / 27
3.2.20260224050100 10 / 27
3.2.20260224040047 10 / 27
3.2.20260224030051 10 / 27
3.2.20260224020049 10 / 27
3.2.20260224010047 10 / 27
3.2.20260224000118 10 / 27
3.2.20260223230057 10 / 27
3.2.20260223220129 10 / 27
3.2.20260223210055 10 / 27
3.2.20260223200048 10 / 27
3.2.20260223190046 10 / 27
3.2.20260223180053 10 / 27
3.2.20260223170054 10 / 27
3.2.20260223160104 10 / 27
3.2.20260223150100 10 / 27
3.2.20260223140048 10 / 27
3.2.20260223130046 10 / 27
3.2.20260223120050 10 / 27
3.2.20260223110044 10 / 27
3.2.20260223100057 10 / 27
3.2.20260223080050 10 / 27
3.2.20260223070053 10 / 27
3.2.20260223060056 10 / 27
3.2.20260223050055 10 / 27
3.2.20260223040046 10 / 27
3.2.20260223030051 10 / 27
3.2.20260223020050 10 / 27
3.2.20260223010049 10 / 27
3.2.20260223000124 10 / 27
3.2.20260222230051 10 / 27
3.2.20260222220052 10 / 27
3.2.20260222210057 10 / 27
3.2.20260222200047 10 / 27
3.2.20260222190054 10 / 27
3.2.20260222180044 10 / 27
3.2.20260222160054 10 / 27
3.2.20260222150059 10 / 27
3.2.20260222140059 10 / 27
Showing 100 of 9651 Next page →

v3.3.20260129210031

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v3.3.20260129150030

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v3.3.20260128230028

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v3.3.20260128183911

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.