← Home

@adguard/dnr-rulesets

npm

Utility to create AdGuard DNR rulesets for mv3 extensions

100
Versions
GPL-3.0-only
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures No source commit

Without SLSA provenance there is no cryptographic link between this tarball and the public source — the axios compromise (March 2026) relied on exactly this gap.

Maintainers

ameshkovmaximtopblakhard

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
source-diff obfuscated-file:dist/filters/local_script_rules.js AI (source-diff): This file contains AdGuard scriptlet filter rules — minified JS strings mapped to expanded implementations. This is expected content for an ad-blocking DNR ruleset package, not malicious obfuscation. ai
source-diff obfuscated-file:dist/filters/chromium-mv3/local_script_rules.js AI (source-diff): These files contain AdGuard's scriptlet lookup tables — minified ad-blocking JS used as object keys with expanded implementations as values. This is the package's documented design, not malicious obfuscation. ai
source-diff obfuscated-file:dist/filters/opera-mv3/local_script_rules.js AI (source-diff): Same as chromium-mv3 variant: AdGuard scriptlet lookup tables with minified keys and readable implementations. Expected build artifact for this package. ai
publish-pattern rapid-publish AI (publish-pattern): Package has 13,351 versions with timestamp-based version numbers, indicating a fully automated filter-list update pipeline. Rapid publishing is the normal operating mode for this package. ai
phantom-deps phantom-dep:chokidar AI (phantom-deps): CLI tool legitimately uses chokidar for file watching; declared in dependencies and referenced in config files. ai
dependencies unvetted-dep:@adguard/agtree AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
phantom-deps phantom-dep:@adguard/re2-wasm AI (phantom-deps): First-party AdGuard dependency declared in package.json; phantom-dep flag is a false positive for same-org packages. ai
phantom-deps phantom-dep:commander AI (phantom-deps): CLI tool legitimately uses commander for CLI argument parsing; declared in dependencies. ai
dependencies unvetted-dep:@adguard/logger AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
dependencies unvetted-dep:@adguard/re2-wasm AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
dependencies unvetted-dep:@adguard/tsurlfilter AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai

Versions (showing 100 of 9657)

Version Deps Published
3.2.20260213000111 10 / 27
3.2.20260212230057 10 / 27
3.2.20260212220050 10 / 27
3.2.20260212210115 10 / 27
3.2.20260212200050 10 / 27
3.2.20260212190049 10 / 27
3.2.20260212180059 10 / 27
3.2.20260212170150 10 / 27
3.2.20260212160102 10 / 27
3.2.20260212150131 10 / 27
3.2.20260212140100 10 / 27
3.2.20260212130121 10 / 27
3.2.20260212120157 10 / 27
3.2.20260212110140 10 / 27
3.2.20260212100054 10 / 27
3.2.20260212090101 10 / 27
3.2.20260212080058 10 / 27
3.2.20260212070049 10 / 27
3.2.20260212060113 10 / 27
3.2.20260212050055 10 / 27
3.2.20260212040051 10 / 27
3.2.20260212030058 10 / 27
3.2.20260212020100 10 / 27
3.2.20260212010056 10 / 27
3.2.20260212000118 10 / 27
3.2.20260211230049 10 / 27
3.2.20260211220054 10 / 27
3.2.20260211210055 10 / 27
3.2.20260211200048 10 / 27
3.2.20260211180058 10 / 27
3.2.20260211170110 10 / 27
3.2.20260211160108 10 / 27
3.2.20260211150048 10 / 27
3.2.20260211140107 10 / 27
3.2.20260211130048 10 / 27
3.2.20260211120057 10 / 27
3.2.20260211110053 10 / 27
3.2.20260211100058 10 / 27
3.2.20260211090123 10 / 27
3.2.20260211080109 10 / 27
3.2.20260211070050 10 / 27
3.2.20260211050054 10 / 27
3.2.20260211040042 10 / 27
3.2.20260211030050 10 / 27
3.2.20260211020048 10 / 27
3.2.20260211010042 10 / 27
3.2.20260211000107 10 / 27
3.2.20260210230051 10 / 27
3.2.20260210220047 10 / 27
3.2.20260210210045 10 / 27
3.2.20260210200052 10 / 27
3.2.20260210190049 10 / 27
3.2.20260210180048 10 / 27
3.2.20260210170049 10 / 27
3.2.20260210160052 10 / 27
3.2.20260210150113 10 / 27
3.2.20260210140140 10 / 27
3.2.20260210130053 10 / 27
3.2.20260210120050 10 / 27
3.2.20260210110054 10 / 27
3.2.20260210090058 10 / 27
3.2.20260210070052 10 / 27
3.2.20260210060105 10 / 27
3.2.20260210050051 10 / 27
3.2.20260210040043 10 / 27
3.2.20260210030047 10 / 27
3.2.20260210010046 10 / 27
3.2.20260210000158 10 / 27
3.2.20260209230103 10 / 27
3.2.20260209220151 10 / 27
3.2.20260209210049 10 / 27
3.2.20260209200048 10 / 27
3.2.20260209190042 10 / 27
3.2.20260209180046 10 / 27
3.2.20260209170045 10 / 27
3.2.20260209160131 10 / 27
3.2.20260209150117 10 / 27
3.2.20260209140107 10 / 27
3.2.20260209120102 10 / 27
3.2.20260209110039 10 / 27
3.2.20260209100038 10 / 27
3.2.20260209090050 10 / 27
3.2.20260209080045 10 / 27
3.2.20260209070041 10 / 27
3.2.20260209060112 10 / 27
3.2.20260209050036 10 / 27
3.2.20260209030035 10 / 27
3.2.20260209020037 10 / 27
3.2.20260209010034 10 / 27
3.2.20260208230037 10 / 27
3.2.20260208220036 10 / 27
3.2.20260208210038 10 / 27
3.2.20260208200036 10 / 27
3.2.20260208190036 10 / 27
3.2.20260208180034 10 / 27
3.2.20260208170036 10 / 27
3.2.20260208160037 10 / 27
3.2.20260208150039 10 / 27
3.2.20260208130039 10 / 27
3.2.20260208120035 10 / 27
Showing 100 of 9657 Next page →

v3.2.20260211200048

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v3.2.20260209050036

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v3.2.20260209010034

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.