← Home

@adguard/dnr-rulesets

npm

Utility to create AdGuard DNR rulesets for mv3 extensions

100
Versions
GPL-3.0-only
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures No source commit

Without SLSA provenance there is no cryptographic link between this tarball and the public source — the axios compromise (March 2026) relied on exactly this gap.

Maintainers

ameshkovmaximtopblakhard

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
source-diff obfuscated-file:dist/filters/local_script_rules.js AI (source-diff): This file contains AdGuard scriptlet filter rules — minified JS strings mapped to expanded implementations. This is expected content for an ad-blocking DNR ruleset package, not malicious obfuscation. ai
source-diff obfuscated-file:dist/filters/chromium-mv3/local_script_rules.js AI (source-diff): These files contain AdGuard's scriptlet lookup tables — minified ad-blocking JS used as object keys with expanded implementations as values. This is the package's documented design, not malicious obfuscation. ai
source-diff obfuscated-file:dist/filters/opera-mv3/local_script_rules.js AI (source-diff): Same as chromium-mv3 variant: AdGuard scriptlet lookup tables with minified keys and readable implementations. Expected build artifact for this package. ai
publish-pattern rapid-publish AI (publish-pattern): Package has 13,351 versions with timestamp-based version numbers, indicating a fully automated filter-list update pipeline. Rapid publishing is the normal operating mode for this package. ai
phantom-deps phantom-dep:chokidar AI (phantom-deps): CLI tool legitimately uses chokidar for file watching; declared in dependencies and referenced in config files. ai
dependencies unvetted-dep:@adguard/agtree AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
phantom-deps phantom-dep:@adguard/re2-wasm AI (phantom-deps): First-party AdGuard dependency declared in package.json; phantom-dep flag is a false positive for same-org packages. ai
phantom-deps phantom-dep:commander AI (phantom-deps): CLI tool legitimately uses commander for CLI argument parsing; declared in dependencies. ai
dependencies unvetted-dep:@adguard/logger AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
dependencies unvetted-dep:@adguard/re2-wasm AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
dependencies unvetted-dep:@adguard/tsurlfilter AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai

Versions (showing 100 of 9680)

Version Deps Published
3.2.20260112070032 10 / 27
3.2.20260112060031 10 / 27
3.2.20260112050031 10 / 27
3.2.20260112040030 10 / 27
3.2.20260112030032 10 / 27
3.2.20260112020032 10 / 27
3.2.20260112010031 10 / 27
3.2.20260112000035 10 / 27
3.2.20260111230031 10 / 27
3.2.20260111220033 10 / 27
3.2.20260111210033 10 / 27
3.2.20260111200032 10 / 27
3.2.20260111190032 10 / 27
3.2.20260111180031 10 / 27
3.2.20260111170032 10 / 27
3.2.20260111160032 10 / 27
3.2.20260111150031 10 / 27
3.2.20260111140032 10 / 27
3.2.20260111120030 10 / 27
3.2.20260111110031 10 / 27
3.2.20260111100032 10 / 27
3.2.20260111090032 10 / 27
3.2.20260111080031 10 / 27
3.2.20260111070033 10 / 27
3.2.20260111060033 10 / 27
3.2.20260111050031 10 / 27
3.2.20260111040032 10 / 27
3.2.20260111030034 10 / 27
3.2.20260111020032 10 / 27
3.2.20260111010032 10 / 27
3.2.20260111000032 10 / 27
3.2.20260110230032 10 / 27
3.2.20260110220033 10 / 27
3.2.20260110210032 10 / 27
3.2.20260110200032 10 / 27
3.2.20260110170031 10 / 27
3.2.20260110160031 10 / 27
3.2.20260110150031 10 / 27
3.2.20260110140030 10 / 27
3.2.20260110130031 10 / 27
3.2.20260110120043 10 / 27
3.2.20260110110030 10 / 27
3.2.20260110100032 10 / 27
3.2.20260110090031 10 / 27
3.2.20260110080030 10 / 27
3.2.20260110070031 10 / 27
3.2.20260110060034 10 / 27
3.2.20260110050031 10 / 27
3.2.20260110040030 10 / 27
3.2.20260110030030 10 / 27
3.2.20260110020031 10 / 27
3.2.20260110010031 10 / 27
3.2.20260110000033 10 / 27
3.2.20260109230031 10 / 27
3.2.20260109220032 10 / 27
3.2.20260109210051 10 / 27
3.2.20260109200032 10 / 27
3.2.20260109190029 10 / 27
3.2.20260109180033 10 / 27
3.2.20260109170032 10 / 27
3.2.20260109160052 10 / 27
3.2.20260109150038 10 / 27
3.2.20260108150052 10 / 27
3.2.20260108140040 10 / 27
3.2.20260108130042 10 / 27
3.2.20260108120040 10 / 27
3.2.20260108110040 10 / 27
3.2.20260108100042 10 / 27
3.2.20260108090042 10 / 27
3.2.20260108080041 10 / 27
3.2.20260108070040 10 / 27
3.2.20260108060043 10 / 27
3.2.20260108050040 10 / 27
3.2.20260108040039 10 / 27
3.2.20260108030041 10 / 27
3.2.20260108020040 10 / 27
3.2.20260108010045 10 / 27
3.2.20260108000043 10 / 27
3.2.20260107230040 10 / 27
3.2.20260107220043 10 / 27
3.2.20260107210043 10 / 27
3.2.20260107200045 10 / 27
3.2.20260107190042 10 / 27
3.2.20260107180041 10 / 27
3.2.20260107170042 10 / 27
3.2.20260107160042 10 / 27
3.2.20260107150042 10 / 27
3.2.20260107140040 10 / 27
3.2.20260107130040 10 / 27
3.2.20260107120041 10 / 27
3.2.20260107110040 10 / 27
3.2.20260107100041 10 / 27
3.2.20260107090041 10 / 27
3.2.20260107080040 10 / 27
3.2.20260107070041 10 / 27
3.2.20260107060043 10 / 27
3.2.20260107050041 10 / 27
3.2.20260107040041 10 / 27
3.2.20260107030042 10 / 27
3.2.20260107020041 10 / 27
Showing 100 of 9680 Next page →

v3.2.20260111210033

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v3.2.20260111020032

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v3.2.20260108090042

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v3.2.20260107230040

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v3.2.20260107070041

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.