← Home

@adguard/dnr-rulesets

npm

Utility to create AdGuard DNR rulesets for mv3 extensions

100
Versions
GPL-3.0-only
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures No source commit

Without SLSA provenance there is no cryptographic link between this tarball and the public source — the axios compromise (March 2026) relied on exactly this gap.

Maintainers

ameshkovmaximtopblakhard

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
source-diff obfuscated-file:dist/filters/local_script_rules.js AI (source-diff): This file contains AdGuard scriptlet filter rules — minified JS strings mapped to expanded implementations. This is expected content for an ad-blocking DNR ruleset package, not malicious obfuscation. ai
source-diff obfuscated-file:dist/filters/chromium-mv3/local_script_rules.js AI (source-diff): These files contain AdGuard's scriptlet lookup tables — minified ad-blocking JS used as object keys with expanded implementations as values. This is the package's documented design, not malicious obfuscation. ai
source-diff obfuscated-file:dist/filters/opera-mv3/local_script_rules.js AI (source-diff): Same as chromium-mv3 variant: AdGuard scriptlet lookup tables with minified keys and readable implementations. Expected build artifact for this package. ai
publish-pattern rapid-publish AI (publish-pattern): Package has 13,351 versions with timestamp-based version numbers, indicating a fully automated filter-list update pipeline. Rapid publishing is the normal operating mode for this package. ai
phantom-deps phantom-dep:chokidar AI (phantom-deps): CLI tool legitimately uses chokidar for file watching; declared in dependencies and referenced in config files. ai
dependencies unvetted-dep:@adguard/agtree AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
phantom-deps phantom-dep:@adguard/re2-wasm AI (phantom-deps): First-party AdGuard dependency declared in package.json; phantom-dep flag is a false positive for same-org packages. ai
phantom-deps phantom-dep:commander AI (phantom-deps): CLI tool legitimately uses commander for CLI argument parsing; declared in dependencies. ai
dependencies unvetted-dep:@adguard/logger AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
dependencies unvetted-dep:@adguard/re2-wasm AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
dependencies unvetted-dep:@adguard/tsurlfilter AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai

Versions (showing 100 of 9691)

Version Deps Published
3.2.20251229080041 10 / 27
3.2.20251229070043 10 / 27
3.2.20251229060047 10 / 27
3.2.20251229050040 10 / 27
3.2.20251229040040 10 / 27
3.2.20251229030044 10 / 27
3.2.20251229020041 10 / 27
3.2.20251229010044 10 / 27
3.2.20251229000043 10 / 27
3.2.20251228230040 10 / 27
3.2.20251228210043 10 / 27
3.2.20251228200042 10 / 27
3.2.20251228190040 10 / 27
3.2.20251228180041 10 / 27
3.2.20251228160041 10 / 27
3.2.20251228150042 10 / 27
3.2.20251228140041 10 / 27
3.2.20251228130041 10 / 27
3.2.20251228120041 10 / 27
3.2.20251228110041 10 / 27
3.2.20251228100040 10 / 27
3.2.20251228090043 10 / 27
3.2.20251228080040 10 / 27
3.2.20251228070040 10 / 27
3.2.20251228060041 10 / 27
3.2.20251228050040 10 / 27
3.2.20251228040040 10 / 27
3.2.20251228030045 10 / 27
3.2.20251228020042 10 / 27
3.2.20251228010044 10 / 27
3.2.20251228000043 10 / 27
3.2.20251227230041 10 / 27
3.2.20251227220040 10 / 27
3.2.20251227210042 10 / 27
3.2.20251227200041 10 / 27
3.2.20251227190042 10 / 27
3.2.20251227180041 10 / 27
3.2.20251227170041 10 / 27
3.2.20251227160044 10 / 27
3.2.20251227150042 10 / 27
3.2.20251227140041 10 / 27
3.2.20251227130043 10 / 27
3.2.20251227120043 10 / 27
3.2.20251227110039 10 / 27
3.2.20251227100040 10 / 27
3.2.20251227090042 10 / 27
3.2.20251227080041 10 / 27
3.2.20251227070041 10 / 27
3.2.20251227060042 10 / 27
3.2.20251227050040 10 / 27
3.2.20251227040040 10 / 27
3.2.20251227030043 10 / 27
3.2.20251227020040 10 / 27
3.2.20251227010045 10 / 27
3.2.20251227000044 10 / 27
3.2.20251226230042 10 / 27
3.2.20251226220041 10 / 27
3.2.20251226210044 10 / 27
3.2.20251226200043 10 / 27
3.2.20251226190041 10 / 27
3.2.20251226180042 10 / 27
3.2.20251226170050 10 / 27
3.2.20251226160609 10 / 27
3.2.20251226150046 10 / 27
3.2.20251226140049 10 / 27
3.2.20251226130045 10 / 27
3.2.20251226120047 10 / 27
3.2.20251226110046 10 / 27
3.2.20251226100042 10 / 27
3.2.20251226090046 10 / 27
3.2.20251226080047 10 / 27
3.2.20251226070042 10 / 27
3.2.20251226060043 10 / 27
3.2.20251226050040 10 / 27
3.2.20251226040041 10 / 27
3.2.20251226030041 10 / 27
3.2.20251226020042 10 / 27
3.2.20251226010054 10 / 27
3.2.20251226000052 10 / 27
3.2.20251225230040 10 / 27
3.2.20251225220043 10 / 27
3.2.20251225210045 10 / 27
3.2.20251225200040 10 / 27
3.2.20251225190043 10 / 27
3.2.20251225180041 10 / 27
3.2.20251225170041 10 / 27
3.2.20251225160046 10 / 27
3.2.20251225150044 10 / 27
3.2.20251225140046 10 / 27
3.2.20251225130043 10 / 27
3.2.20251225120055 10 / 27
3.2.20251225110043 10 / 27
3.2.20251225100051 10 / 27
3.2.20251225090047 10 / 27
3.2.20251225080047 10 / 27
3.2.20251225070040 10 / 27
3.2.20251225060044 10 / 27
3.2.20251225050041 10 / 27
3.2.20251225040040 10 / 27
3.2.20251225030043 10 / 27
Showing 100 of 9691 Next page →

v3.2.20251228070040

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v3.2.20251227120043

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v3.2.20251226170050

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v3.2.20251226040041

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.