← Home

@adguard/dnr-rulesets

npm

Utility to create AdGuard DNR rulesets for mv3 extensions

100
Versions
GPL-3.0-only
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures No source commit

Without SLSA provenance there is no cryptographic link between this tarball and the public source — the axios compromise (March 2026) relied on exactly this gap.

Maintainers

ameshkovmaximtopblakhard

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
source-diff obfuscated-file:dist/filters/local_script_rules.js AI (source-diff): This file contains AdGuard scriptlet filter rules — minified JS strings mapped to expanded implementations. This is expected content for an ad-blocking DNR ruleset package, not malicious obfuscation. ai
source-diff obfuscated-file:dist/filters/chromium-mv3/local_script_rules.js AI (source-diff): These files contain AdGuard's scriptlet lookup tables — minified ad-blocking JS used as object keys with expanded implementations as values. This is the package's documented design, not malicious obfuscation. ai
source-diff obfuscated-file:dist/filters/opera-mv3/local_script_rules.js AI (source-diff): Same as chromium-mv3 variant: AdGuard scriptlet lookup tables with minified keys and readable implementations. Expected build artifact for this package. ai
publish-pattern rapid-publish AI (publish-pattern): Package has 13,351 versions with timestamp-based version numbers, indicating a fully automated filter-list update pipeline. Rapid publishing is the normal operating mode for this package. ai
phantom-deps phantom-dep:chokidar AI (phantom-deps): CLI tool legitimately uses chokidar for file watching; declared in dependencies and referenced in config files. ai
dependencies unvetted-dep:@adguard/agtree AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
phantom-deps phantom-dep:@adguard/re2-wasm AI (phantom-deps): First-party AdGuard dependency declared in package.json; phantom-dep flag is a false positive for same-org packages. ai
phantom-deps phantom-dep:commander AI (phantom-deps): CLI tool legitimately uses commander for CLI argument parsing; declared in dependencies. ai
dependencies unvetted-dep:@adguard/logger AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
dependencies unvetted-dep:@adguard/re2-wasm AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
dependencies unvetted-dep:@adguard/tsurlfilter AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai

Versions (showing 100 of 9560)

Version Deps Published
4.0.20260305150133 10 / 29
4.0.20260305140052 10 / 29
4.0.20260305130137 10 / 29
4.0.20260305120107 10 / 29
4.0.20260305110453 10 / 29
4.0.20260305090058 10 / 29
4.0.20260305080058 10 / 29
4.0.20260305070042 10 / 29
4.0.20260305060055 10 / 29
4.0.20260305050056 10 / 29
4.0.20260305040050 10 / 29
4.0.20260305030051 10 / 29
4.0.20260305020054 10 / 29
4.0.20260305000117 10 / 29
4.0.20260304220055 10 / 29
4.0.20260304210055 10 / 29
4.0.20260304190049 10 / 29
4.0.20260304180143 10 / 29
4.0.20260304170058 10 / 29
4.0.20260304160110 10 / 29
4.0.20260304150205 10 / 29
4.0.20260304140054 10 / 29
4.0.20260304130102 10 / 29
4.0.20260304120057 10 / 29
4.0.20260304110055 10 / 29
4.0.20260304080051 10 / 29
4.0.20260304070047 10 / 29
4.0.20260304060049 10 / 29
4.0.20260304040049 10 / 29
4.0.20260304030053 10 / 29
4.0.20260304020048 10 / 29
4.0.20260304010045 10 / 29
4.0.20260304000104 10 / 29
4.0.20260303230050 10 / 29
4.0.20260303220052 10 / 29
4.0.20260303210048 10 / 29
4.0.20260303200045 10 / 29
4.0.20260303180054 10 / 29
4.0.20260303170059 10 / 29
4.0.20260303160057 10 / 29
4.0.20260303150046 10 / 29
4.0.20260303130152 10 / 29
4.0.20260303110055 10 / 29
4.0.20260303100120 10 / 29
4.0.20260303090138 10 / 29
4.0.20260303080135 10 / 29
4.0.20260303070043 10 / 29
4.0.20260303060055 10 / 29
4.0.20260303050109 10 / 29
4.0.20260303040049 10 / 29
4.0.20260303030042 10 / 29
4.0.20260303020050 10 / 29
4.0.20260303010045 10 / 29
4.0.20260303000116 10 / 29
4.0.20260302230041 10 / 29
4.0.20260302220053 10 / 29
4.0.20260302210043 10 / 29
4.0.20260302200046 10 / 29
4.0.20260302190100 10 / 29
4.0.20260302180054 10 / 29
4.0.20260302170054 10 / 29
4.0.20260302160107 10 / 29
4.0.20260302150103 10 / 29
4.0.20260302120146 10 / 29
4.0.20260302100117 10 / 29
4.0.20260302080048 10 / 29
4.0.20260302070043 10 / 29
4.0.20260302060049 10 / 29
4.0.20260302050105 10 / 29
4.0.20260302040046 10 / 29
4.0.20260302030052 10 / 29
4.0.20260302020047 10 / 29
4.0.20260302010045 10 / 29
4.0.20260302000106 10 / 29
4.0.20260301220051 10 / 29
4.0.20260301210050 10 / 29
4.0.20260301200042 10 / 29
4.0.20260301190045 10 / 29
4.0.20260301180049 10 / 29
4.0.20260301170055 10 / 29
4.0.20260301160045 10 / 29
4.0.20260301150055 10 / 29
4.0.20260301130055 10 / 29
4.0.20260301120052 10 / 29
4.0.20260301110057 10 / 29
4.0.20260301100050 10 / 29
4.0.20260301090053 10 / 29
4.0.20260301080043 10 / 29
4.0.20260301070051 10 / 29
4.0.20260301060053 10 / 29
4.0.20260301040049 10 / 29
4.0.20260301030050 10 / 29
4.0.20260301020047 10 / 29
4.0.20260301010047 10 / 29
4.0.20260228220046 10 / 29
4.0.20260228210043 10 / 29
4.0.20260228200048 10 / 29
4.0.20260228190051 10 / 29
4.0.20260228180050 10 / 29
4.0.20260228170052 10 / 29
Showing 100 of 9560 Next page →

v4.0.20260305020054

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.20260304210055

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.20260303040049

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.20260302000106

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.20260301210050

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.20260301160045

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.20260301150055

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.20260301080043

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.