← Home

@adguard/dnr-rulesets

npm

Utility to create AdGuard DNR rulesets for mv3 extensions

100
Versions
GPL-3.0-only
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures No source commit

Without SLSA provenance there is no cryptographic link between this tarball and the public source — the axios compromise (March 2026) relied on exactly this gap.

Maintainers

ameshkovmaximtopblakhard

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
source-diff obfuscated-file:dist/filters/local_script_rules.js AI (source-diff): This file contains AdGuard scriptlet filter rules — minified JS strings mapped to expanded implementations. This is expected content for an ad-blocking DNR ruleset package, not malicious obfuscation. ai
source-diff obfuscated-file:dist/filters/chromium-mv3/local_script_rules.js AI (source-diff): These files contain AdGuard's scriptlet lookup tables — minified ad-blocking JS used as object keys with expanded implementations as values. This is the package's documented design, not malicious obfuscation. ai
source-diff obfuscated-file:dist/filters/opera-mv3/local_script_rules.js AI (source-diff): Same as chromium-mv3 variant: AdGuard scriptlet lookup tables with minified keys and readable implementations. Expected build artifact for this package. ai
publish-pattern rapid-publish AI (publish-pattern): Package has 13,351 versions with timestamp-based version numbers, indicating a fully automated filter-list update pipeline. Rapid publishing is the normal operating mode for this package. ai
phantom-deps phantom-dep:chokidar AI (phantom-deps): CLI tool legitimately uses chokidar for file watching; declared in dependencies and referenced in config files. ai
dependencies unvetted-dep:@adguard/agtree AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
phantom-deps phantom-dep:@adguard/re2-wasm AI (phantom-deps): First-party AdGuard dependency declared in package.json; phantom-dep flag is a false positive for same-org packages. ai
phantom-deps phantom-dep:commander AI (phantom-deps): CLI tool legitimately uses commander for CLI argument parsing; declared in dependencies. ai
dependencies unvetted-dep:@adguard/logger AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
dependencies unvetted-dep:@adguard/re2-wasm AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
dependencies unvetted-dep:@adguard/tsurlfilter AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai

Versions (showing 100 of 9545)

Version Deps Published
4.0.20260325010111 10 / 29
4.0.20260325000104 10 / 29
4.0.20260324220053 10 / 29
4.0.20260324210058 10 / 29
4.0.20260324200044 10 / 29
4.0.20260324190128 10 / 29
4.0.20260324180054 10 / 29
4.0.20260324170059 10 / 29
4.0.20260324160100 10 / 29
4.0.20260324150108 10 / 29
4.0.20260324140106 10 / 29
4.0.20260324120114 10 / 29
4.0.20260324110059 10 / 29
4.0.20260324100111 10 / 29
4.0.20260324090052 10 / 29
4.0.20260324080105 10 / 29
4.0.20260324070056 10 / 29
4.0.20260324050059 10 / 29
4.0.20260324040057 10 / 29
4.0.20260324030049 10 / 29
4.0.20260324020044 10 / 29
4.0.20260324010112 10 / 29
4.0.20260324000102 10 / 29
4.0.20260323230049 10 / 29
4.0.20260323220054 10 / 29
4.0.20260323210053 10 / 29
4.0.20260323200055 10 / 29
4.0.20260323190056 10 / 29
4.0.20260323180049 10 / 29
4.0.20260323170107 10 / 29
4.0.20260323160146 10 / 29
4.0.20260323150104 10 / 29
4.0.20260323140915 10 / 29
4.0.20260323130109 10 / 29
4.0.20260323120118 10 / 29
4.0.20260323110118 10 / 29
4.0.20260323100048 10 / 29
4.0.20260323080111 10 / 29
4.0.20260323070054 10 / 29
4.0.20260323050057 10 / 29
4.0.20260323040052 10 / 29
4.0.20260323020044 10 / 29
4.0.20260323010103 10 / 29
4.0.20260323000122 10 / 29
4.0.20260322230051 10 / 29
4.0.20260322220043 10 / 29
4.0.20260322210103 10 / 29
4.0.20260322200054 10 / 29
4.0.20260322190059 10 / 29
4.0.20260322180045 10 / 29
4.0.20260322170050 10 / 29
4.0.20260322150104 10 / 29
4.0.20260322140052 10 / 29
4.0.20260322130050 10 / 29
4.0.20260322110045 10 / 29
4.0.20260322100055 10 / 29
4.0.20260322090055 10 / 29
4.0.20260322080049 10 / 29
4.0.20260322070051 10 / 29
4.0.20260322060107 10 / 29
4.0.20260322050102 10 / 29
4.0.20260322030058 10 / 29
4.0.20260322020047 10 / 29
4.0.20260322000102 10 / 29
4.0.20260321230055 10 / 29
4.0.20260321220047 10 / 29
4.0.20260321210059 10 / 29
4.0.20260321200055 10 / 29
4.0.20260321190053 10 / 29
4.0.20260321170103 10 / 29
4.0.20260321160048 10 / 29
4.0.20260321150059 10 / 29
4.0.20260321140057 10 / 29
4.0.20260321130051 10 / 29
4.0.20260321110053 10 / 29
4.0.20260321100045 10 / 29
4.0.20260321090051 10 / 29
4.0.20260321080053 10 / 29
4.0.20260321070054 10 / 29
4.0.20260321060056 10 / 29
4.0.20260321050057 10 / 29
4.0.20260321040046 10 / 29
4.0.20260321030053 10 / 29
4.0.20260321020049 10 / 29
4.0.20260321000054 10 / 29
4.0.20260320230053 10 / 29
4.0.20260320220053 10 / 29
4.0.20260320210048 10 / 29
4.0.20260320200044 10 / 29
4.0.20260320190052 10 / 29
4.0.20260320180050 10 / 29
4.0.20260320170053 10 / 29
4.0.20260320160105 10 / 29
4.0.20260320151346 10 / 29
4.0.20260320130139 10 / 29
4.0.20260320120201 10 / 29
4.0.20260320110113 10 / 29
4.0.20260320100106 10 / 29
4.0.20260320090122 10 / 29
4.0.20260320080119 10 / 29
Showing 100 of 9545 Next page →

v4.0.20260323100048

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.