← Home

@adguard/dnr-rulesets

Utility to create AdGuard DNR rulesets for mv3 extensions

100
Versions
GPL-3.0-only
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures No source commit

Without SLSA provenance there is no cryptographic link between this tarball and the public source — the axios compromise (March 2026) relied on exactly this gap.

Maintainers

ameshkovmaximtopblakhard

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
source-diff obfuscated-file:dist/filters/local_script_rules.js AI (source-diff): This file contains AdGuard scriptlet filter rules — minified JS strings mapped to expanded implementations. This is expected content for an ad-blocking DNR ruleset package, not malicious obfuscation. ai
source-diff obfuscated-file:dist/filters/chromium-mv3/local_script_rules.js AI (source-diff): These files contain AdGuard's scriptlet lookup tables — minified ad-blocking JS used as object keys with expanded implementations as values. This is the package's documented design, not malicious obfuscation. ai
source-diff obfuscated-file:dist/filters/opera-mv3/local_script_rules.js AI (source-diff): Same as chromium-mv3 variant: AdGuard scriptlet lookup tables with minified keys and readable implementations. Expected build artifact for this package. ai
publish-pattern rapid-publish AI (publish-pattern): Package has 13,351 versions with timestamp-based version numbers, indicating a fully automated filter-list update pipeline. Rapid publishing is the normal operating mode for this package. ai
phantom-deps phantom-dep:chokidar AI (phantom-deps): CLI tool legitimately uses chokidar for file watching; declared in dependencies and referenced in config files. ai
dependencies unvetted-dep:@adguard/agtree AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
phantom-deps phantom-dep:@adguard/re2-wasm AI (phantom-deps): First-party AdGuard dependency declared in package.json; phantom-dep flag is a false positive for same-org packages. ai
phantom-deps phantom-dep:commander AI (phantom-deps): CLI tool legitimately uses commander for CLI argument parsing; declared in dependencies. ai
dependencies unvetted-dep:@adguard/logger AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
dependencies unvetted-dep:@adguard/re2-wasm AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
dependencies unvetted-dep:@adguard/tsurlfilter AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai

Versions (showing 100 of 9613)

Version Deps Published
3.3.20260403100049 10 / 29
3.3.20260403090054 10 / 29
3.3.20260403070305 10 / 29
3.3.20260403060124 10 / 29
3.3.20260403040045 10 / 29
3.3.20260403030127 10 / 29
3.3.20260403020043 10 / 29
3.3.20260403010102 10 / 29
3.3.20260403000119 10 / 29
3.3.20260402210102 10 / 29
3.3.20260402190047 10 / 29
3.3.20260402170102 10 / 29
3.3.20260402160053 10 / 29
3.3.20260402150057 10 / 29
3.3.20260402140111 10 / 29
3.3.20260402130115 10 / 29
3.3.20260402120059 10 / 29
3.3.20260402110126 10 / 29
3.3.20260402100050 10 / 29
3.3.20260402090053 10 / 29
3.3.20260402080103 10 / 29
3.3.20260402070042 10 / 29
3.3.20260402060046 10 / 29
3.3.20260402050121 10 / 29
3.3.20260402040054 10 / 29
3.3.20260402030054 10 / 29
3.3.20260402020053 10 / 29
3.3.20260402010101 10 / 29
3.3.20260402000111 10 / 29
3.3.20260401230046 10 / 29
3.3.20260401220049 10 / 29
3.3.20260401210105 10 / 29
3.3.20260401200052 10 / 29
3.3.20260401190056 10 / 29
3.3.20260401180100 10 / 29
3.3.20260401170104 10 / 29
3.3.20260401160048 10 / 29
3.3.20260401140053 10 / 29
3.3.20260401130058 10 / 29
3.3.20260401120122 10 / 29
3.3.20260401110049 10 / 29
3.3.20260401100103 10 / 29
3.3.20260401090051 10 / 29
3.3.20260401080059 10 / 29
3.3.20260401070121 10 / 29
3.3.20260401060121 10 / 29
3.3.20260401050126 10 / 29
3.3.20260401040050 10 / 29
3.3.20260401030051 10 / 29
3.3.20260401010108 10 / 29
3.3.20260401000102 10 / 29
3.3.20260331230052 10 / 29
3.3.20260331220050 10 / 29
3.3.20260331210102 10 / 29
3.3.20260331200051 10 / 29
3.3.20260331180049 10 / 29
3.3.20260331170110 10 / 29
3.3.20260331160106 10 / 29
3.3.20260331150052 10 / 29
3.3.20260331140057 10 / 29
3.3.20260331130122 10 / 29
3.3.20260331110050 10 / 29
3.3.20260331100055 10 / 29
3.3.20260331090100 10 / 29
3.3.20260331070118 10 / 29
3.3.20260331060103 10 / 29
3.3.20260331050109 10 / 29
3.3.20260331040051 10 / 29
3.3.20260331030127 10 / 29
3.3.20260331020047 10 / 29
3.3.20260331010048 10 / 29
3.3.20260331000116 10 / 29
3.3.20260330230049 10 / 29
3.3.20260330220059 10 / 29
3.3.20260330210056 10 / 29
3.3.20260330200048 10 / 29
3.3.20260330190053 10 / 29
3.3.20260330180046 10 / 29
3.3.20260330170106 10 / 29
3.3.20260330160057 10 / 29
3.3.20260330150106 10 / 29
3.3.20260330140106 10 / 29
3.3.20260330130139 10 / 29
3.3.20260330090059 10 / 29
3.3.20260330080105 10 / 29
3.3.20260330070058 10 / 29
3.3.20260330060143 10 / 29
3.3.20260330050052 10 / 29
3.3.20260330030055 10 / 29
3.3.20260330020055 10 / 29
3.3.20260330010103 10 / 29
3.3.20260330000129 10 / 29
3.3.20260329230052 10 / 29
3.3.20260329220048 10 / 29
3.3.20260329210057 10 / 29
3.3.20260329180051 10 / 29
3.3.20260329170101 10 / 29
3.3.20260329160100 10 / 29
3.3.20260329150052 10 / 29
3.3.20260329140049 10 / 29
Showing 100 of 9613 Next page →
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.