← Home

@adguard/dnr-rulesets

Utility to create AdGuard DNR rulesets for mv3 extensions

100
Versions
GPL-3.0-only
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures No source commit

Without SLSA provenance there is no cryptographic link between this tarball and the public source — the axios compromise (March 2026) relied on exactly this gap.

Maintainers

ameshkovmaximtopblakhard

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
source-diff obfuscated-file:dist/filters/local_script_rules.js AI (source-diff): This file contains AdGuard scriptlet filter rules — minified JS strings mapped to expanded implementations. This is expected content for an ad-blocking DNR ruleset package, not malicious obfuscation. ai
source-diff obfuscated-file:dist/filters/chromium-mv3/local_script_rules.js AI (source-diff): These files contain AdGuard's scriptlet lookup tables — minified ad-blocking JS used as object keys with expanded implementations as values. This is the package's documented design, not malicious obfuscation. ai
source-diff obfuscated-file:dist/filters/opera-mv3/local_script_rules.js AI (source-diff): Same as chromium-mv3 variant: AdGuard scriptlet lookup tables with minified keys and readable implementations. Expected build artifact for this package. ai
publish-pattern rapid-publish AI (publish-pattern): Package has 13,351 versions with timestamp-based version numbers, indicating a fully automated filter-list update pipeline. Rapid publishing is the normal operating mode for this package. ai
phantom-deps phantom-dep:chokidar AI (phantom-deps): CLI tool legitimately uses chokidar for file watching; declared in dependencies and referenced in config files. ai
dependencies unvetted-dep:@adguard/agtree AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
phantom-deps phantom-dep:@adguard/re2-wasm AI (phantom-deps): First-party AdGuard dependency declared in package.json; phantom-dep flag is a false positive for same-org packages. ai
phantom-deps phantom-dep:commander AI (phantom-deps): CLI tool legitimately uses commander for CLI argument parsing; declared in dependencies. ai
dependencies unvetted-dep:@adguard/logger AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
dependencies unvetted-dep:@adguard/re2-wasm AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
dependencies unvetted-dep:@adguard/tsurlfilter AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai

Versions (showing 100 of 9575)

Version Deps Published
4.0.20260213230055 10 / 29
4.0.20260213220055 10 / 29
4.0.20260213210059 10 / 29
4.0.20260213200048 10 / 29
4.0.20260213180139 10 / 29
4.0.20260213160057 10 / 29
4.0.20260213150152 10 / 29
4.0.20260213140658 10 / 29
4.0.20260213130139 10 / 29
4.0.20260213120144 10 / 29
4.0.20260213111153 10 / 29
4.0.20260213100228 10 / 29
4.0.20260213090124 10 / 29
4.0.20260213080114 10 / 29
4.0.20260213070056 10 / 29
4.0.20260213050100 10 / 29
4.0.20260213040052 10 / 29
4.0.20260213030054 10 / 29
4.0.20260213020055 10 / 29
4.0.20260212230049 10 / 29
4.0.20260212210117 10 / 29
4.0.20260212190054 10 / 29
4.0.20260212180100 10 / 29
4.0.20260212170153 10 / 29
4.0.20260212160108 10 / 29
4.0.20260212150116 10 / 29
4.0.20260212140108 10 / 29
4.0.20260212130133 10 / 29
4.0.20260212120144 10 / 29
4.0.20260212110116 10 / 29
4.0.20260212100101 10 / 29
4.0.20260212090051 10 / 29
4.0.20260212070055 10 / 29
4.0.20260212060047 10 / 29
4.0.20260212050104 10 / 29
4.0.20260212040057 10 / 29
4.0.20260212030058 10 / 29
4.0.20260212020054 10 / 29
4.0.20260212010055 10 / 29
4.0.20260212000123 10 / 29
4.0.20260211230056 10 / 29
4.0.20260211220056 10 / 29
4.0.20260211210105 10 / 29
4.0.20260211200052 10 / 29
4.0.20260211190059 10 / 29
4.0.20260211180100 10 / 29
4.0.20260211170119 10 / 29
4.0.20260211150053 10 / 29
4.0.20260211140107 10 / 29
4.0.20260211130052 10 / 29
4.0.20260211120056 10 / 29
4.0.20260211110047 10 / 29
4.0.20260211100057 10 / 29
4.0.20260211090131 10 / 29
4.0.20260211080113 10 / 29
4.0.20260211070046 10 / 29
4.0.20260211060112 10 / 29
4.0.20260211050053 10 / 29
4.0.20260211040048 10 / 29
4.0.20260211030051 10 / 29
4.0.20260211010045 10 / 29
4.0.20260211000108 10 / 29
4.0.20260210230045 10 / 29
4.0.20260210220047 10 / 29
4.0.20260210210047 10 / 29
4.0.20260210200048 10 / 29
4.0.20260210190052 10 / 29
4.0.20260210180053 10 / 29
4.0.20260210150110 10 / 29
4.0.20260210140140 10 / 29
4.0.20260210130056 10 / 29
4.0.20260210120050 10 / 29
4.0.20260210110051 10 / 29
4.0.20260210100049 10 / 29
4.0.20260210090058 10 / 29
4.0.20260210080107 10 / 29
4.0.20260210070047 10 / 29
4.0.20260210060106 10 / 29
4.0.20260210050051 10 / 29
4.0.20260210040046 10 / 29
4.0.20260210030047 10 / 29
4.0.20260210020058 10 / 29
4.0.20260210010044 10 / 29
4.0.20260210000129 10 / 29
4.0.20260209230110 10 / 29
4.0.20260209220207 10 / 29
4.0.20260209200043 10 / 29
4.0.20260209190045 10 / 29
4.0.20260209180046 10 / 29
4.0.20260209170040 10 / 29
4.0.20260209160123 10 / 29
4.0.20260209150150 10 / 29
4.0.20260209140057 10 / 29
4.0.20260209130123 10 / 29
4.0.20260209110034 10 / 29
4.0.20260209100039 10 / 29
4.0.20260209090050 10 / 29
4.0.20260209080044 10 / 29
4.0.20260209070034 10 / 29
4.0.20260209060043 10 / 29
Showing 100 of 9575 Next page →
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.