← Home

@adguard/dnr-rulesets

npm

Utility to create AdGuard DNR rulesets for mv3 extensions

100
Versions
GPL-3.0-only
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures No source commit

Without SLSA provenance there is no cryptographic link between this tarball and the public source — the axios compromise (March 2026) relied on exactly this gap.

Maintainers

ameshkovmaximtopblakhard

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
source-diff obfuscated-file:dist/filters/local_script_rules.js AI (source-diff): This file contains AdGuard scriptlet filter rules — minified JS strings mapped to expanded implementations. This is expected content for an ad-blocking DNR ruleset package, not malicious obfuscation. ai
source-diff obfuscated-file:dist/filters/chromium-mv3/local_script_rules.js AI (source-diff): These files contain AdGuard's scriptlet lookup tables — minified ad-blocking JS used as object keys with expanded implementations as values. This is the package's documented design, not malicious obfuscation. ai
source-diff obfuscated-file:dist/filters/opera-mv3/local_script_rules.js AI (source-diff): Same as chromium-mv3 variant: AdGuard scriptlet lookup tables with minified keys and readable implementations. Expected build artifact for this package. ai
publish-pattern rapid-publish AI (publish-pattern): Package has 13,351 versions with timestamp-based version numbers, indicating a fully automated filter-list update pipeline. Rapid publishing is the normal operating mode for this package. ai
phantom-deps phantom-dep:chokidar AI (phantom-deps): CLI tool legitimately uses chokidar for file watching; declared in dependencies and referenced in config files. ai
dependencies unvetted-dep:@adguard/agtree AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
phantom-deps phantom-dep:@adguard/re2-wasm AI (phantom-deps): First-party AdGuard dependency declared in package.json; phantom-dep flag is a false positive for same-org packages. ai
phantom-deps phantom-dep:commander AI (phantom-deps): CLI tool legitimately uses commander for CLI argument parsing; declared in dependencies. ai
dependencies unvetted-dep:@adguard/logger AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
dependencies unvetted-dep:@adguard/re2-wasm AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
dependencies unvetted-dep:@adguard/tsurlfilter AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai

Versions (showing 100 of 9552)

Version Deps Published
4.0.20260315110104 10 / 29
4.0.20260315100101 10 / 29
4.0.20260315090059 10 / 29
4.0.20260315080047 10 / 29
4.0.20260315070050 10 / 29
4.0.20260315060113 10 / 29
4.0.20260315050058 10 / 29
4.0.20260315040053 10 / 29
4.0.20260315030051 10 / 29
4.0.20260315020054 10 / 29
4.0.20260315010047 10 / 29
4.0.20260315000054 10 / 29
4.0.20260314230047 10 / 29
4.0.20260314220050 10 / 29
4.0.20260314210056 10 / 29
4.0.20260314200047 10 / 29
4.0.20260314180052 10 / 29
4.0.20260314170049 10 / 29
4.0.20260314160047 10 / 29
4.0.20260314150055 10 / 29
4.0.20260314130133 10 / 29
4.0.20260314120104 10 / 29
4.0.20260314110053 10 / 29
4.0.20260314100054 10 / 29
4.0.20260314080049 10 / 29
4.0.20260314070045 10 / 29
4.0.20260314060043 10 / 29
4.0.20260314050103 10 / 29
4.0.20260314040048 10 / 29
4.0.20260314020046 10 / 29
4.0.20260314010051 10 / 29
4.0.20260313230050 10 / 29
4.0.20260313220049 10 / 29
4.0.20260313210047 10 / 29
4.0.20260313200045 10 / 29
4.0.20260313180050 10 / 29
4.0.20260313170054 10 / 29
4.0.20260313150101 10 / 29
4.0.20260313140050 10 / 29
4.0.20260313130110 10 / 29
4.0.20260313120110 10 / 29
4.0.20260313110055 10 / 29
4.0.20260313100057 10 / 29
4.0.20260313090059 10 / 29
4.0.20260313080049 10 / 29
4.0.20260313070114 10 / 29
4.0.20260313060101 10 / 29
4.0.20260313050050 10 / 29
4.0.20260313040105 10 / 29
4.0.20260313030055 10 / 29
4.0.20260313020048 10 / 29
4.0.20260313000112 10 / 29
4.0.20260312230047 10 / 29
4.0.20260312220050 10 / 29
4.0.20260312210053 10 / 29
4.0.20260312180051 10 / 29
4.0.20260312140059 10 / 29
4.0.20260312130233 10 / 29
4.0.20260312120055 10 / 29
4.0.20260312110246 10 / 29
4.0.20260312100054 10 / 29
4.0.20260312090112 10 / 29
4.0.20260312070103 10 / 29
4.0.20260312050053 10 / 29
4.0.20260312040046 10 / 29
4.0.20260312030313 10 / 29
4.0.20260312020055 10 / 29
4.0.20260312010051 10 / 29
4.0.20260312000120 10 / 29
4.0.20260311230051 10 / 29
4.0.20260311220056 10 / 29
4.0.20260311210059 10 / 29
4.0.20260311200054 10 / 29
4.0.20260311190055 10 / 29
4.0.20260311180057 10 / 29
4.0.20260311170057 10 / 29
4.0.20260311160118 10 / 29
4.0.20260311150128 10 / 29
4.0.20260311140109 10 / 29
4.0.20260311130104 10 / 29
4.0.20260311110111 10 / 29
4.0.20260311090156 10 / 29
4.0.20260311080053 10 / 29
4.0.20260311070051 10 / 29
4.0.20260311060108 10 / 29
4.0.20260311050054 10 / 29
4.0.20260311030057 10 / 29
4.0.20260311020101 10 / 29
4.0.20260311010048 10 / 29
4.0.20260311000102 10 / 29
4.0.20260310230053 10 / 29
4.0.20260310220049 10 / 29
4.0.20260310210103 10 / 29
4.0.20260310200053 10 / 29
4.0.20260310190050 10 / 29
4.0.20260310180055 10 / 29
4.0.20260310170059 10 / 29
4.0.20260310160102 10 / 29
4.0.20260310150103 10 / 29
4.0.20260310130049 10 / 29
Showing 100 of 9552 Next page →

v4.0.20260315100101

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.20260314160047

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.20260314080049

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.20260314040048

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.20260313060101

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.20260313000112

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.20260312090112

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.20260311210059

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.20260311140109

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.