← Home

@adguard/dnr-rulesets

npm

Utility to create AdGuard DNR rulesets for mv3 extensions

100
Versions
GPL-3.0-only
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures No source commit

Without SLSA provenance there is no cryptographic link between this tarball and the public source — the axios compromise (March 2026) relied on exactly this gap.

Maintainers

ameshkovmaximtopblakhard

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
source-diff obfuscated-file:dist/filters/local_script_rules.js AI (source-diff): This file contains AdGuard scriptlet filter rules — minified JS strings mapped to expanded implementations. This is expected content for an ad-blocking DNR ruleset package, not malicious obfuscation. ai
source-diff obfuscated-file:dist/filters/chromium-mv3/local_script_rules.js AI (source-diff): These files contain AdGuard's scriptlet lookup tables — minified ad-blocking JS used as object keys with expanded implementations as values. This is the package's documented design, not malicious obfuscation. ai
source-diff obfuscated-file:dist/filters/opera-mv3/local_script_rules.js AI (source-diff): Same as chromium-mv3 variant: AdGuard scriptlet lookup tables with minified keys and readable implementations. Expected build artifact for this package. ai
publish-pattern rapid-publish AI (publish-pattern): Package has 13,351 versions with timestamp-based version numbers, indicating a fully automated filter-list update pipeline. Rapid publishing is the normal operating mode for this package. ai
phantom-deps phantom-dep:chokidar AI (phantom-deps): CLI tool legitimately uses chokidar for file watching; declared in dependencies and referenced in config files. ai
dependencies unvetted-dep:@adguard/agtree AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
phantom-deps phantom-dep:@adguard/re2-wasm AI (phantom-deps): First-party AdGuard dependency declared in package.json; phantom-dep flag is a false positive for same-org packages. ai
phantom-deps phantom-dep:commander AI (phantom-deps): CLI tool legitimately uses commander for CLI argument parsing; declared in dependencies. ai
dependencies unvetted-dep:@adguard/logger AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
dependencies unvetted-dep:@adguard/re2-wasm AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
dependencies unvetted-dep:@adguard/tsurlfilter AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai

Versions (showing 100 of 9677)

Version Deps Published
3.2.20260116190029 10 / 27
3.2.20260116180029 10 / 27
3.2.20260116170031 10 / 27
3.2.20260116160029 10 / 27
3.2.20260116150031 10 / 27
3.2.20260116140041 10 / 27
3.2.20260116130029 10 / 27
3.2.20260116120032 10 / 27
3.2.20260116110111 10 / 27
3.2.20260116100103 10 / 27
3.2.20260116090032 10 / 27
3.2.20260116080307 10 / 27
3.2.20260116070040 10 / 27
3.2.20260116060044 10 / 27
3.2.20260116050028 10 / 27
3.2.20260116040028 10 / 27
3.2.20260116030030 10 / 27
3.2.20260116020028 10 / 27
3.2.20260116010028 10 / 27
3.2.20260116000029 10 / 27
3.2.20260115230028 10 / 27
3.2.20260115220030 10 / 27
3.2.20260115210030 10 / 27
3.2.20260115200031 10 / 27
3.2.20260115190054 10 / 27
3.2.20260115180031 10 / 27
3.2.20260115170033 10 / 27
3.2.20260115160259 10 / 27
3.2.20260115151153 10 / 27
3.2.20260115140801 10 / 27
3.2.20260115120032 10 / 27
3.2.20260115110029 10 / 27
3.2.20260115100037 10 / 27
3.2.20260115090707 10 / 27
3.2.20260115080043 10 / 27
3.2.20260115070028 10 / 27
3.2.20260115060035 10 / 27
3.2.20260115050028 10 / 27
3.2.20260115040027 10 / 27
3.2.20260115020029 10 / 27
3.2.20260115010028 10 / 27
3.2.20260115000032 10 / 27
3.2.20260114230028 10 / 27
3.2.20260114220027 10 / 27
3.2.20260114210031 10 / 27
3.2.20260114200029 10 / 27
3.2.20260114190033 10 / 27
3.2.20260114180034 10 / 27
3.2.20260114170031 10 / 27
3.2.20260114160032 10 / 27
3.2.20260114150031 10 / 27
3.2.20260114140028 10 / 27
3.2.20260114130032 10 / 27
3.2.20260114120030 10 / 27
3.2.20260114110030 10 / 27
3.2.20260114100029 10 / 27
3.2.20260114090030 10 / 27
3.2.20260114080039 10 / 27
3.2.20260114070030 10 / 27
3.2.20260114060048 10 / 27
3.2.20260114050030 10 / 27
3.2.20260114040028 10 / 27
3.2.20260114030048 10 / 27
3.2.20260114020027 10 / 27
3.2.20260114010027 10 / 27
3.2.20260114000032 10 / 27
3.2.20260113230029 10 / 27
3.2.20260113220027 10 / 27
3.2.20260113211226 10 / 27
3.2.20260113180032 10 / 27
3.2.20260113160032 10 / 27
3.2.20260113140031 10 / 27
3.2.20260113130032 10 / 27
3.2.20260113120031 10 / 27
3.2.20260113110033 10 / 27
3.2.20260113100030 10 / 27
3.2.20260113090030 10 / 27
3.2.20260113080031 10 / 27
3.2.20260113070031 10 / 27
3.2.20260113050031 10 / 27
3.2.20260113040028 10 / 27
3.2.20260113030029 10 / 27
3.2.20260113020031 10 / 27
3.2.20260113010031 10 / 27
3.2.20260113000033 10 / 27
3.2.20260112230031 10 / 27
3.2.20260112220039 10 / 27
3.2.20260112210031 10 / 27
3.2.20260112200031 10 / 27
3.2.20260112190031 10 / 27
3.2.20260112180032 10 / 27
3.2.20260112170030 10 / 27
3.2.20260112160030 10 / 27
3.2.20260112140039 10 / 27
3.2.20260112130553 10 / 27
3.2.20260112120031 10 / 27
3.2.20260112110033 10 / 27
3.2.20260112100039 10 / 27
3.2.20260112090033 10 / 27
3.2.20260112080032 10 / 27
Showing 100 of 9677 Next page →

v3.2.20260115200031

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v3.2.20260114220027

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v3.2.20260112180032

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.