← Home

@adguard/dnr-rulesets

Utility to create AdGuard DNR rulesets for mv3 extensions

100
Versions
GPL-3.0-only
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures No source commit

Without SLSA provenance there is no cryptographic link between this tarball and the public source — the axios compromise (March 2026) relied on exactly this gap.

Maintainers

ameshkovmaximtopblakhard

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
source-diff obfuscated-file:dist/filters/local_script_rules.js AI (source-diff): This file contains AdGuard scriptlet filter rules — minified JS strings mapped to expanded implementations. This is expected content for an ad-blocking DNR ruleset package, not malicious obfuscation. ai
source-diff obfuscated-file:dist/filters/chromium-mv3/local_script_rules.js AI (source-diff): These files contain AdGuard's scriptlet lookup tables — minified ad-blocking JS used as object keys with expanded implementations as values. This is the package's documented design, not malicious obfuscation. ai
source-diff obfuscated-file:dist/filters/opera-mv3/local_script_rules.js AI (source-diff): Same as chromium-mv3 variant: AdGuard scriptlet lookup tables with minified keys and readable implementations. Expected build artifact for this package. ai
publish-pattern rapid-publish AI (publish-pattern): Package has 13,351 versions with timestamp-based version numbers, indicating a fully automated filter-list update pipeline. Rapid publishing is the normal operating mode for this package. ai
phantom-deps phantom-dep:chokidar AI (phantom-deps): CLI tool legitimately uses chokidar for file watching; declared in dependencies and referenced in config files. ai
dependencies unvetted-dep:@adguard/agtree AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
phantom-deps phantom-dep:@adguard/re2-wasm AI (phantom-deps): First-party AdGuard dependency declared in package.json; phantom-dep flag is a false positive for same-org packages. ai
phantom-deps phantom-dep:commander AI (phantom-deps): CLI tool legitimately uses commander for CLI argument parsing; declared in dependencies. ai
dependencies unvetted-dep:@adguard/logger AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
dependencies unvetted-dep:@adguard/re2-wasm AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
dependencies unvetted-dep:@adguard/tsurlfilter AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai

Versions (showing 100 of 9640)

Version Deps Published
3.3.20260217200117 10 / 29
3.3.20260217190046 10 / 29
3.3.20260217180121 10 / 29
3.3.20260217170827 10 / 29
3.3.20260217160109 10 / 29
3.3.20260217140117 10 / 29
3.3.20260217130135 10 / 29
3.3.20260217120131 10 / 29
3.3.20260217110139 10 / 29
3.3.20260217100154 10 / 29
3.3.20260217060128 10 / 29
3.3.20260217050051 10 / 29
3.3.20260217040057 10 / 29
3.3.20260217030056 10 / 29
3.3.20260217020055 10 / 29
3.3.20260217010055 10 / 29
3.3.20260217000142 10 / 29
3.3.20260216230129 10 / 29
3.3.20260216210054 10 / 29
3.3.20260216200056 10 / 29
3.3.20260216190055 10 / 29
3.3.20260216180059 10 / 29
3.3.20260216170117 10 / 29
3.3.20260216160104 10 / 29
3.3.20260216130118 10 / 29
3.3.20260216120103 10 / 29
3.3.20260216110103 10 / 29
3.3.20260216100129 10 / 29
3.3.20260216090115 10 / 29
3.3.20260216080057 10 / 29
3.3.20260216070057 10 / 29
3.3.20260216060056 10 / 29
3.3.20260216050055 10 / 29
3.3.20260216040055 10 / 29
3.3.20260216030058 10 / 29
3.3.20260216020050 10 / 29
3.3.20260216010047 10 / 29
3.3.20260216000119 10 / 29
3.3.20260215230057 10 / 29
3.3.20260215220046 10 / 29
3.3.20260215210052 10 / 29
3.3.20260215200057 10 / 29
3.3.20260215190056 10 / 29
3.3.20260215180054 10 / 29
3.3.20260215170050 10 / 29
3.3.20260215160057 10 / 29
3.3.20260215150100 10 / 29
3.3.20260215140056 10 / 29
3.3.20260215130055 10 / 29
3.3.20260215120057 10 / 29
3.3.20260215110055 10 / 29
3.3.20260215100101 10 / 29
3.3.20260215090053 10 / 29
3.3.20260215080053 10 / 29
3.3.20260215070054 10 / 29
3.3.20260215060106 10 / 29
3.3.20260215050110 10 / 29
3.3.20260215040051 10 / 29
3.3.20260215030055 10 / 29
3.3.20260215020048 10 / 29
3.3.20260215010051 10 / 29
3.3.20260215000053 10 / 29
3.3.20260214230050 10 / 29
3.3.20260214220050 10 / 29
3.3.20260214210053 10 / 29
3.3.20260214200051 10 / 29
3.3.20260214190051 10 / 29
3.3.20260214180047 10 / 29
3.3.20260214160052 10 / 29
3.3.20260214150055 10 / 29
3.3.20260214130054 10 / 29
3.3.20260214120058 10 / 29
3.3.20260214110046 10 / 29
3.3.20260214100054 10 / 29
3.3.20260214090057 10 / 29
3.3.20260214080051 10 / 29
3.3.20260214070051 10 / 29
3.3.20260214050100 10 / 29
3.3.20260214040048 10 / 29
3.3.20260214030054 10 / 29
3.3.20260214020100 10 / 29
3.3.20260214010055 10 / 29
3.3.20260214000105 10 / 29
3.3.20260213230056 10 / 29
3.3.20260213220101 10 / 29
3.3.20260213210057 10 / 29
3.3.20260213200050 10 / 29
3.3.20260213180104 10 / 29
3.3.20260213170101 10 / 29
3.3.20260213160050 10 / 29
3.3.20260213150151 10 / 29
3.3.20260213140628 10 / 29
3.3.20260213130120 10 / 29
3.3.20260213120210 10 / 29
3.3.20260213111301 10 / 29
3.3.20260213100239 10 / 29
3.3.20260213090123 10 / 29
3.3.20260213080054 10 / 29
3.3.20260213070049 10 / 29
3.3.20260213060101 10 / 29
Showing 100 of 9640 Next page →
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.