← Home

@adguard/dnr-rulesets

Utility to create AdGuard DNR rulesets for mv3 extensions

100
Versions
GPL-3.0-only
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures No source commit

Without SLSA provenance there is no cryptographic link between this tarball and the public source — the axios compromise (March 2026) relied on exactly this gap.

Maintainers

ameshkovmaximtopblakhard

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
source-diff obfuscated-file:dist/filters/local_script_rules.js AI (source-diff): This file contains AdGuard scriptlet filter rules — minified JS strings mapped to expanded implementations. This is expected content for an ad-blocking DNR ruleset package, not malicious obfuscation. ai
source-diff obfuscated-file:dist/filters/chromium-mv3/local_script_rules.js AI (source-diff): These files contain AdGuard's scriptlet lookup tables — minified ad-blocking JS used as object keys with expanded implementations as values. This is the package's documented design, not malicious obfuscation. ai
source-diff obfuscated-file:dist/filters/opera-mv3/local_script_rules.js AI (source-diff): Same as chromium-mv3 variant: AdGuard scriptlet lookup tables with minified keys and readable implementations. Expected build artifact for this package. ai
publish-pattern rapid-publish AI (publish-pattern): Package has 13,351 versions with timestamp-based version numbers, indicating a fully automated filter-list update pipeline. Rapid publishing is the normal operating mode for this package. ai
phantom-deps phantom-dep:chokidar AI (phantom-deps): CLI tool legitimately uses chokidar for file watching; declared in dependencies and referenced in config files. ai
dependencies unvetted-dep:@adguard/agtree AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
phantom-deps phantom-dep:@adguard/re2-wasm AI (phantom-deps): First-party AdGuard dependency declared in package.json; phantom-dep flag is a false positive for same-org packages. ai
phantom-deps phantom-dep:commander AI (phantom-deps): CLI tool legitimately uses commander for CLI argument parsing; declared in dependencies. ai
dependencies unvetted-dep:@adguard/logger AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
dependencies unvetted-dep:@adguard/re2-wasm AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
dependencies unvetted-dep:@adguard/tsurlfilter AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai

Versions (showing 100 of 9540)

Version Deps Published
4.0.20260403170043 10 / 29
4.0.20260403160055 10 / 29
4.0.20260403150110 10 / 29
4.0.20260403140052 10 / 29
4.0.20260403130107 10 / 29
4.0.20260403120057 10 / 29
4.0.20260403110056 10 / 29
4.0.20260403100050 10 / 29
4.0.20260403090052 10 / 29
4.0.20260403070301 10 / 29
4.0.20260403060048 10 / 29
4.0.20260403050056 10 / 29
4.0.20260403040051 10 / 29
4.0.20260403030127 10 / 29
4.0.20260403010102 10 / 29
4.0.20260403000119 10 / 29
4.0.20260402220048 10 / 29
4.0.20260402160053 10 / 29
4.0.20260402130115 10 / 29
4.0.20260402120058 10 / 29
4.0.20260402110127 10 / 29
4.0.20260402100050 10 / 29
4.0.20260402090058 10 / 29
4.0.20260402080101 10 / 29
4.0.20260402070057 10 / 29
4.0.20260402060130 10 / 29
4.0.20260402050108 10 / 29
4.0.20260402040044 10 / 29
4.0.20260402030058 10 / 29
4.0.20260402010045 10 / 29
4.0.20260402000117 10 / 29
4.0.20260401230048 10 / 29
4.0.20260401220041 10 / 29
4.0.20260401200052 10 / 29
4.0.20260401170103 10 / 29
4.0.20260401150111 10 / 29
4.0.20260401140052 10 / 29
4.0.20260401130058 10 / 29
4.0.20260401120116 10 / 29
4.0.20260401110057 10 / 29
4.0.20260401100107 10 / 29
4.0.20260401090052 10 / 29
4.0.20260401080101 10 / 29
4.0.20260401060056 10 / 29
4.0.20260401050122 10 / 29
4.0.20260401040044 10 / 29
4.0.20260401030052 10 / 29
4.0.20260401020054 10 / 29
4.0.20260401010108 10 / 29
4.0.20260401000058 10 / 29
4.0.20260331230047 10 / 29
4.0.20260331210102 10 / 29
4.0.20260331200054 10 / 29
4.0.20260331190052 10 / 29
4.0.20260331180053 10 / 29
4.0.20260331170058 10 / 29
4.0.20260331160050 10 / 29
4.0.20260331150100 10 / 29
4.0.20260331140051 10 / 29
4.0.20260331130138 10 / 29
4.0.20260331120118 10 / 29
4.0.20260331110057 10 / 29
4.0.20260331100058 10 / 29
4.0.20260331090057 10 / 29
4.0.20260331080103 10 / 29
4.0.20260331070118 10 / 29
4.0.20260331060103 10 / 29
4.0.20260331050058 10 / 29
4.0.20260331030127 10 / 29
4.0.20260331020052 10 / 29
4.0.20260331000116 10 / 29
4.0.20260330230049 10 / 29
4.0.20260330210102 10 / 29
4.0.20260330200055 10 / 29
4.0.20260330190054 10 / 29
4.0.20260330180054 10 / 29
4.0.20260330170106 10 / 29
4.0.20260330160053 10 / 29
4.0.20260330150105 10 / 29
4.0.20260330140101 10 / 29
4.0.20260330130151 10 / 29
4.0.20260330110122 10 / 29
4.0.20260330100123 10 / 29
4.0.20260330090058 10 / 29
4.0.20260330080055 10 / 29
4.0.20260330070058 10 / 29
4.0.20260330060117 10 / 29
4.0.20260330050100 10 / 29
4.0.20260330040052 10 / 29
4.0.20260330020048 10 / 29
4.0.20260330010103 10 / 29
4.0.20260330000126 10 / 29
4.0.20260329230054 10 / 29
4.0.20260329220047 10 / 29
4.0.20260329210056 10 / 29
4.0.20260329180042 10 / 29
4.0.20260329170101 10 / 29
4.0.20260329160049 10 / 29
4.0.20260329140046 10 / 29
4.0.20260329130057 10 / 29
Showing 100 of 9540 Next page →
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.