← Home

@adguard/dnr-rulesets

npm

Utility to create AdGuard DNR rulesets for mv3 extensions

100
Versions
GPL-3.0-only
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures No source commit

Without SLSA provenance there is no cryptographic link between this tarball and the public source — the axios compromise (March 2026) relied on exactly this gap.

Maintainers

ameshkovmaximtopblakhard

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
source-diff obfuscated-file:dist/filters/local_script_rules.js AI (source-diff): This file contains AdGuard scriptlet filter rules — minified JS strings mapped to expanded implementations. This is expected content for an ad-blocking DNR ruleset package, not malicious obfuscation. ai
source-diff obfuscated-file:dist/filters/chromium-mv3/local_script_rules.js AI (source-diff): These files contain AdGuard's scriptlet lookup tables — minified ad-blocking JS used as object keys with expanded implementations as values. This is the package's documented design, not malicious obfuscation. ai
source-diff obfuscated-file:dist/filters/opera-mv3/local_script_rules.js AI (source-diff): Same as chromium-mv3 variant: AdGuard scriptlet lookup tables with minified keys and readable implementations. Expected build artifact for this package. ai
publish-pattern rapid-publish AI (publish-pattern): Package has 13,351 versions with timestamp-based version numbers, indicating a fully automated filter-list update pipeline. Rapid publishing is the normal operating mode for this package. ai
phantom-deps phantom-dep:chokidar AI (phantom-deps): CLI tool legitimately uses chokidar for file watching; declared in dependencies and referenced in config files. ai
dependencies unvetted-dep:@adguard/agtree AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
phantom-deps phantom-dep:@adguard/re2-wasm AI (phantom-deps): First-party AdGuard dependency declared in package.json; phantom-dep flag is a false positive for same-org packages. ai
phantom-deps phantom-dep:commander AI (phantom-deps): CLI tool legitimately uses commander for CLI argument parsing; declared in dependencies. ai
dependencies unvetted-dep:@adguard/logger AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
dependencies unvetted-dep:@adguard/re2-wasm AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
dependencies unvetted-dep:@adguard/tsurlfilter AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai

Versions (showing 100 of 9570)

Version Deps Published
4.0.20260218120058 10 / 29
4.0.20260218110256 10 / 29
4.0.20260218100245 10 / 29
4.0.20260218080110 10 / 29
4.0.20260218070109 10 / 29
4.0.20260218060126 10 / 29
4.0.20260218050115 10 / 29
4.0.20260218040100 10 / 29
4.0.20260218030201 10 / 29
4.0.20260218020103 10 / 29
4.0.20260218010053 10 / 29
4.0.20260218000149 10 / 29
4.0.20260217230104 10 / 29
4.0.20260217210055 10 / 29
4.0.20260217200113 10 / 29
4.0.20260217190106 10 / 29
4.0.20260217180117 10 / 29
4.0.20260217170932 10 / 29
4.0.20260217160105 10 / 29
4.0.20260217150104 10 / 29
4.0.20260217140114 10 / 29
4.0.20260217130113 10 / 29
4.0.20260217120133 10 / 29
4.0.20260217110128 10 / 29
4.0.20260217100154 10 / 29
4.0.20260217070111 10 / 29
4.0.20260217060123 10 / 29
4.0.20260217050053 10 / 29
4.0.20260217040057 10 / 29
4.0.20260217020049 10 / 29
4.0.20260217010059 10 / 29
4.0.20260216230131 10 / 29
4.0.20260216220052 10 / 29
4.0.20260216210101 10 / 29
4.0.20260216200055 10 / 29
4.0.20260216190049 10 / 29
4.0.20260216180052 10 / 29
4.0.20260216170102 10 / 29
4.0.20260216160055 10 / 29
4.0.20260216150107 10 / 29
4.0.20260216140113 10 / 29
4.0.20260216130129 10 / 29
4.0.20260216120106 10 / 29
4.0.20260216110055 10 / 29
4.0.20260216100112 10 / 29
4.0.20260216090115 10 / 29
4.0.20260216080103 10 / 29
4.0.20260216070052 10 / 29
4.0.20260216060055 10 / 29
4.0.20260216050054 10 / 29
4.0.20260216040055 10 / 29
4.0.20260216030050 10 / 29
4.0.20260216020051 10 / 29
4.0.20260216010055 10 / 29
4.0.20260216000113 10 / 29
4.0.20260215230059 10 / 29
4.0.20260215220051 10 / 29
4.0.20260215210056 10 / 29
4.0.20260215200052 10 / 29
4.0.20260215190056 10 / 29
4.0.20260215180050 10 / 29
4.0.20260215170053 10 / 29
4.0.20260215160057 10 / 29
4.0.20260215150056 10 / 29
4.0.20260215140051 10 / 29
4.0.20260215130056 10 / 29
4.0.20260215120057 10 / 29
4.0.20260215110100 10 / 29
4.0.20260215100101 10 / 29
4.0.20260215090059 10 / 29
4.0.20260215080046 10 / 29
4.0.20260215070055 10 / 29
4.0.20260215060112 10 / 29
4.0.20260215050053 10 / 29
4.0.20260215040047 10 / 29
4.0.20260215030055 10 / 29
4.0.20260215020056 10 / 29
4.0.20260215010044 10 / 29
4.0.20260215000055 10 / 29
4.0.20260214220051 10 / 29
4.0.20260214210054 10 / 29
4.0.20260214200046 10 / 29
4.0.20260214190051 10 / 29
4.0.20260214180051 10 / 29
4.0.20260214170054 10 / 29
4.0.20260214150056 10 / 29
4.0.20260214140052 10 / 29
4.0.20260214120058 10 / 29
4.0.20260214110059 10 / 29
4.0.20260214100054 10 / 29
4.0.20260214090056 10 / 29
4.0.20260214080051 10 / 29
4.0.20260214070054 10 / 29
4.0.20260214060049 10 / 29
4.0.20260214050101 10 / 29
4.0.20260214040053 10 / 29
4.0.20260214030053 10 / 29
4.0.20260214020049 10 / 29
4.0.20260214010055 10 / 29
4.0.20260214000109 10 / 29
Showing 100 of 9570 Next page →

v4.0.20260217180117

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.20260216180052

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.20260215110100

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.20260214040053

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.