← Home

@adguard/dnr-rulesets

npm

Utility to create AdGuard DNR rulesets for mv3 extensions

100
Versions
GPL-3.0-only
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures No source commit

Without SLSA provenance there is no cryptographic link between this tarball and the public source — the axios compromise (March 2026) relied on exactly this gap.

Maintainers

ameshkovmaximtopblakhard

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
source-diff obfuscated-file:dist/filters/local_script_rules.js AI (source-diff): This file contains AdGuard scriptlet filter rules — minified JS strings mapped to expanded implementations. This is expected content for an ad-blocking DNR ruleset package, not malicious obfuscation. ai
source-diff obfuscated-file:dist/filters/chromium-mv3/local_script_rules.js AI (source-diff): These files contain AdGuard's scriptlet lookup tables — minified ad-blocking JS used as object keys with expanded implementations as values. This is the package's documented design, not malicious obfuscation. ai
source-diff obfuscated-file:dist/filters/opera-mv3/local_script_rules.js AI (source-diff): Same as chromium-mv3 variant: AdGuard scriptlet lookup tables with minified keys and readable implementations. Expected build artifact for this package. ai
publish-pattern rapid-publish AI (publish-pattern): Package has 13,351 versions with timestamp-based version numbers, indicating a fully automated filter-list update pipeline. Rapid publishing is the normal operating mode for this package. ai
phantom-deps phantom-dep:chokidar AI (phantom-deps): CLI tool legitimately uses chokidar for file watching; declared in dependencies and referenced in config files. ai
dependencies unvetted-dep:@adguard/agtree AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
phantom-deps phantom-dep:@adguard/re2-wasm AI (phantom-deps): First-party AdGuard dependency declared in package.json; phantom-dep flag is a false positive for same-org packages. ai
phantom-deps phantom-dep:commander AI (phantom-deps): CLI tool legitimately uses commander for CLI argument parsing; declared in dependencies. ai
dependencies unvetted-dep:@adguard/logger AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
dependencies unvetted-dep:@adguard/re2-wasm AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
dependencies unvetted-dep:@adguard/tsurlfilter AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai

Versions (showing 100 of 9616)

Version Deps Published
3.3.20260329130050 10 / 29
3.3.20260329120053 10 / 29
3.3.20260329100044 10 / 29
3.3.20260329090053 10 / 29
3.3.20260329080051 10 / 29
3.3.20260329070049 10 / 29
3.3.20260329060048 10 / 29
3.3.20260329050053 10 / 29
3.3.20260329040100 10 / 29
3.3.20260329030047 10 / 29
3.3.20260329020050 10 / 29
3.3.20260329010050 10 / 29
3.3.20260329000059 10 / 29
3.3.20260328230047 10 / 29
3.3.20260328220054 10 / 29
3.3.20260328210055 10 / 29
3.3.20260328200051 10 / 29
3.3.20260328190055 10 / 29
3.3.20260328180048 10 / 29
3.3.20260328170058 10 / 29
3.3.20260328160052 10 / 29
3.3.20260328150048 10 / 29
3.3.20260328140043 10 / 29
3.3.20260328130059 10 / 29
3.3.20260328110056 10 / 29
3.3.20260328100054 10 / 29
3.3.20260328090055 10 / 29
3.3.20260328080045 10 / 29
3.3.20260328070049 10 / 29
3.3.20260328060047 10 / 29
3.3.20260328050110 10 / 29
3.3.20260328040046 10 / 29
3.3.20260328030051 10 / 29
3.3.20260328020050 10 / 29
3.3.20260328010110 10 / 29
3.3.20260328000055 10 / 29
3.3.20260327230050 10 / 29
3.3.20260327220049 10 / 29
3.3.20260327210102 10 / 29
3.3.20260327200051 10 / 29
3.3.20260327190100 10 / 29
3.3.20260327180058 10 / 29
3.3.20260327170049 10 / 29
3.3.20260327160105 10 / 29
3.3.20260327150054 10 / 29
3.3.20260327140211 10 / 29
3.3.20260327130101 10 / 29
3.3.20260327120130 10 / 29
3.3.20260327110122 10 / 29
3.3.20260327100048 10 / 29
3.3.20260327090058 10 / 29
3.3.20260327060122 10 / 29
3.3.20260327050052 10 / 29
3.3.20260327040100 10 / 29
3.3.20260327030050 10 / 29
3.3.20260327020054 10 / 29
3.3.20260327010055 10 / 29
3.3.20260327000110 10 / 29
3.3.20260326230055 10 / 29
3.3.20260326220052 10 / 29
3.3.20260326190130 10 / 29
3.3.20260326180100 10 / 29
3.3.20260326170145 10 / 29
3.3.20260326160131 10 / 29
3.3.20260326150139 10 / 29
3.3.20260326140058 10 / 29
3.3.20260326130112 10 / 29
3.3.20260326110107 10 / 29
3.3.20260326100148 10 / 29
3.3.20260326090100 10 / 29
3.3.20260326080052 10 / 29
3.3.20260326070134 10 / 29
3.3.20260326060106 10 / 29
3.3.20260326050101 10 / 29
3.3.20260326040056 10 / 29
3.3.20260326030059 10 / 29
3.3.20260326020059 10 / 29
3.3.20260326010103 10 / 29
3.3.20260326000148 10 / 29
3.3.20260325230050 10 / 29
3.3.20260325220058 10 / 29
3.3.20260325210053 10 / 29
3.3.20260325200056 10 / 29
3.3.20260325190058 10 / 29
3.3.20260325180051 10 / 29
3.3.20260325170103 10 / 29
3.3.20260325160155 10 / 29
3.3.20260325150100 10 / 29
3.3.20260325140221 10 / 29
3.3.20260325130100 10 / 29
3.3.20260325120106 10 / 29
3.3.20260325110106 10 / 29
3.3.20260325100141 10 / 29
3.3.20260325090121 10 / 29
3.3.20260325080103 10 / 29
3.3.20260325070044 10 / 29
3.3.20260325060059 10 / 29
3.3.20260325050116 10 / 29
3.3.20260325040048 10 / 29
3.3.20260325020053 10 / 29
Showing 100 of 9616 Next page →

v3.3.20260329070049

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.3.20260328090055

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v3.3.20260327100048

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.3.20260326190130

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.3.20260326060106

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.3.20260325110106

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.