← Home

@adguard/dnr-rulesets

npm

Utility to create AdGuard DNR rulesets for mv3 extensions

100
Versions
GPL-3.0-only
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures No source commit

Without SLSA provenance there is no cryptographic link between this tarball and the public source — the axios compromise (March 2026) relied on exactly this gap.

Maintainers

ameshkovmaximtopblakhard

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
source-diff obfuscated-file:dist/filters/local_script_rules.js AI (source-diff): This file contains AdGuard scriptlet filter rules — minified JS strings mapped to expanded implementations. This is expected content for an ad-blocking DNR ruleset package, not malicious obfuscation. ai
source-diff obfuscated-file:dist/filters/chromium-mv3/local_script_rules.js AI (source-diff): These files contain AdGuard's scriptlet lookup tables — minified ad-blocking JS used as object keys with expanded implementations as values. This is the package's documented design, not malicious obfuscation. ai
source-diff obfuscated-file:dist/filters/opera-mv3/local_script_rules.js AI (source-diff): Same as chromium-mv3 variant: AdGuard scriptlet lookup tables with minified keys and readable implementations. Expected build artifact for this package. ai
publish-pattern rapid-publish AI (publish-pattern): Package has 13,351 versions with timestamp-based version numbers, indicating a fully automated filter-list update pipeline. Rapid publishing is the normal operating mode for this package. ai
phantom-deps phantom-dep:chokidar AI (phantom-deps): CLI tool legitimately uses chokidar for file watching; declared in dependencies and referenced in config files. ai
dependencies unvetted-dep:@adguard/agtree AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
phantom-deps phantom-dep:@adguard/re2-wasm AI (phantom-deps): First-party AdGuard dependency declared in package.json; phantom-dep flag is a false positive for same-org packages. ai
phantom-deps phantom-dep:commander AI (phantom-deps): CLI tool legitimately uses commander for CLI argument parsing; declared in dependencies. ai
dependencies unvetted-dep:@adguard/logger AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
dependencies unvetted-dep:@adguard/re2-wasm AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
dependencies unvetted-dep:@adguard/tsurlfilter AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai

Versions (showing 100 of 9619)

Version Deps Published
3.3.20260320110115 10 / 29
3.3.20260320100101 10 / 29
3.3.20260320090121 10 / 29
3.3.20260320060100 10 / 29
3.3.20260320050100 10 / 29
3.3.20260320040108 10 / 29
3.3.20260320030059 10 / 29
3.3.20260320020102 10 / 29
3.3.20260320010058 10 / 29
3.3.20260320000130 10 / 29
3.3.20260319230044 10 / 29
3.3.20260319220050 10 / 29
3.3.20260319210100 10 / 29
3.3.20260319190535 10 / 29
3.3.20260319180054 10 / 29
3.3.20260319170059 10 / 29
3.3.20260319160149 10 / 29
3.3.20260319150117 10 / 29
3.3.20260319140101 10 / 29
3.3.20260319130106 10 / 29
3.3.20260319120157 10 / 29
3.3.20260319110112 10 / 29
3.3.20260319100948 10 / 29
3.3.20260319090218 10 / 29
3.3.20260319080058 10 / 29
3.3.20260319070106 10 / 29
3.3.20260319060045 10 / 29
3.3.20260319040047 10 / 29
3.3.20260319030107 10 / 29
3.3.20260319020051 10 / 29
3.3.20260319000133 10 / 29
3.3.20260318220047 10 / 29
3.3.20260318210058 10 / 29
3.3.20260318200050 10 / 29
3.3.20260318190053 10 / 29
3.3.20260318180055 10 / 29
3.3.20260318170136 10 / 29
3.3.20260318160525 10 / 29
3.3.20260318150105 10 / 29
3.3.20260318140207 10 / 29
3.3.20260318131151 10 / 29
3.3.20260318120048 10 / 29
3.3.20260318110105 10 / 29
3.3.20260318100350 10 / 29
3.3.20260318080115 10 / 29
3.3.20260318070100 10 / 29
3.3.20260318060122 10 / 29
3.3.20260318050049 10 / 29
3.3.20260318030055 10 / 29
3.3.20260318000058 10 / 29
3.3.20260317230045 10 / 29
3.3.20260317210047 10 / 29
3.3.20260317200107 10 / 29
3.3.20260317190055 10 / 29
3.3.20260317180054 10 / 29
3.3.20260317170100 10 / 29
3.3.20260317150059 10 / 29
3.3.20260317140117 10 / 29
3.3.20260317130049 10 / 29
3.3.20260317120102 10 / 29
3.3.20260317110130 10 / 29
3.3.20260317100101 10 / 29
3.3.20260317090052 10 / 29
3.3.20260317080114 10 / 29
3.3.20260317070049 10 / 29
3.3.20260317060046 10 / 29
3.3.20260317050047 10 / 29
3.3.20260317040043 10 / 29
3.3.20260317030052 10 / 29
3.3.20260317020047 10 / 29
3.3.20260317010105 10 / 29
3.3.20260317000123 10 / 29
3.3.20260316230053 10 / 29
3.3.20260316210053 10 / 29
3.3.20260316200051 10 / 29
3.3.20260316180103 10 / 29
3.3.20260316170053 10 / 29
3.3.20260316160048 10 / 29
3.3.20260316150307 10 / 29
3.3.20260316140106 10 / 29
3.3.20260316130103 10 / 29
3.3.20260316120131 10 / 29
3.3.20260316110106 10 / 29
3.3.20260316100124 10 / 29
3.3.20260316090056 10 / 29
3.3.20260316070045 10 / 29
3.3.20260316030127 10 / 29
3.3.20260316020051 10 / 29
3.3.20260316010055 10 / 29
3.3.20260316000112 10 / 29
3.3.20260315230045 10 / 29
3.3.20260315220050 10 / 29
3.3.20260315210051 10 / 29
3.3.20260315200043 10 / 29
3.3.20260315190049 10 / 29
3.3.20260315180048 10 / 29
3.3.20260315170050 10 / 29
3.3.20260315160050 10 / 29
3.3.20260315150057 10 / 29
3.3.20260315140052 10 / 29
Showing 100 of 9619 Next page →

v3.3.20260320000130

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v3.3.20260319210100

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v3.3.20260319090218

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v3.3.20260317090052

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v3.3.20260317080114

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v3.3.20260317040043

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v3.3.20260316150307

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.