← Home

@adguard/dnr-rulesets

npm

Utility to create AdGuard DNR rulesets for mv3 extensions

100
Versions
GPL-3.0-only
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures No source commit

Without SLSA provenance there is no cryptographic link between this tarball and the public source — the axios compromise (March 2026) relied on exactly this gap.

Maintainers

ameshkovmaximtopblakhard

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
source-diff obfuscated-file:dist/filters/local_script_rules.js AI (source-diff): This file contains AdGuard scriptlet filter rules — minified JS strings mapped to expanded implementations. This is expected content for an ad-blocking DNR ruleset package, not malicious obfuscation. ai
source-diff obfuscated-file:dist/filters/chromium-mv3/local_script_rules.js AI (source-diff): These files contain AdGuard's scriptlet lookup tables — minified ad-blocking JS used as object keys with expanded implementations as values. This is the package's documented design, not malicious obfuscation. ai
source-diff obfuscated-file:dist/filters/opera-mv3/local_script_rules.js AI (source-diff): Same as chromium-mv3 variant: AdGuard scriptlet lookup tables with minified keys and readable implementations. Expected build artifact for this package. ai
publish-pattern rapid-publish AI (publish-pattern): Package has 13,351 versions with timestamp-based version numbers, indicating a fully automated filter-list update pipeline. Rapid publishing is the normal operating mode for this package. ai
phantom-deps phantom-dep:chokidar AI (phantom-deps): CLI tool legitimately uses chokidar for file watching; declared in dependencies and referenced in config files. ai
dependencies unvetted-dep:@adguard/agtree AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
phantom-deps phantom-dep:@adguard/re2-wasm AI (phantom-deps): First-party AdGuard dependency declared in package.json; phantom-dep flag is a false positive for same-org packages. ai
phantom-deps phantom-dep:commander AI (phantom-deps): CLI tool legitimately uses commander for CLI argument parsing; declared in dependencies. ai
dependencies unvetted-dep:@adguard/logger AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
dependencies unvetted-dep:@adguard/re2-wasm AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
dependencies unvetted-dep:@adguard/tsurlfilter AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai

Versions (showing 100 of 9671)

Version Deps Published
3.2.20260125100042 10 / 27
3.2.20260125090029 10 / 27
3.2.20260125080028 10 / 27
3.2.20260125070027 10 / 27
3.2.20260125060045 10 / 27
3.2.20260125050028 10 / 27
3.2.20260125040029 10 / 27
3.2.20260125030029 10 / 27
3.2.20260125020029 10 / 27
3.2.20260125010029 10 / 27
3.2.20260125000035 10 / 27
3.2.20260124230029 10 / 27
3.2.20260124220028 10 / 27
3.2.20260124210028 10 / 27
3.2.20260124200027 10 / 27
3.2.20260124190028 10 / 27
3.2.20260124180027 10 / 27
3.2.20260124170027 10 / 27
3.2.20260124160028 10 / 27
3.2.20260124150028 10 / 27
3.2.20260124140029 10 / 27
3.2.20260124130028 10 / 27
3.2.20260124110040 10 / 27
3.2.20260124090027 10 / 27
3.2.20260124080029 10 / 27
3.2.20260124070029 10 / 27
3.2.20260124060042 10 / 27
3.2.20260124050029 10 / 27
3.2.20260124040029 10 / 27
3.2.20260124030028 10 / 27
3.2.20260124020028 10 / 27
3.2.20260124010029 10 / 27
3.2.20260124000029 10 / 27
3.2.20260123230028 10 / 27
3.2.20260123220028 10 / 27
3.2.20260123210029 10 / 27
3.2.20260123200030 10 / 27
3.2.20260123190029 10 / 27
3.2.20260123180028 10 / 27
3.2.20260123170033 10 / 27
3.2.20260123160030 10 / 27
3.2.20260123150030 10 / 27
3.2.20260123140032 10 / 27
3.2.20260123130033 10 / 27
3.2.20260123120038 10 / 27
3.2.20260123110040 10 / 27
3.2.20260123100040 10 / 27
3.2.20260123090030 10 / 27
3.2.20260123080029 10 / 27
3.2.20260123070028 10 / 27
3.2.20260123060032 10 / 27
3.2.20260123050028 10 / 27
3.2.20260123040029 10 / 27
3.2.20260123030027 10 / 27
3.2.20260123020030 10 / 27
3.2.20260123010027 10 / 27
3.2.20260123000036 10 / 27
3.2.20260122230028 10 / 27
3.2.20260122220029 10 / 27
3.2.20260122210029 10 / 27
3.2.20260122200028 10 / 27
3.2.20260122190053 10 / 27
3.2.20260122180032 10 / 27
3.2.20260122170029 10 / 27
3.2.20260122160057 10 / 27
3.2.20260122150142 10 / 27
3.2.20260122140033 10 / 27
3.2.20260122130040 10 / 27
3.2.20260122120030 10 / 27
3.2.20260122110028 10 / 27
3.2.20260122100229 10 / 27
3.2.20260122090032 10 / 27
3.2.20260122080028 10 / 27
3.2.20260122070029 10 / 27
3.2.20260122060041 10 / 27
3.2.20260122050029 10 / 27
3.2.20260122040028 10 / 27
3.2.20260122030028 10 / 27
3.2.20260122020029 10 / 27
3.2.20260122010028 10 / 27
3.2.20260122000029 10 / 27
3.2.20260121230028 10 / 27
3.2.20260121220030 10 / 27
3.2.20260121180028 10 / 27
3.2.20260121170029 10 / 27
3.2.20260121160029 10 / 27
3.2.20260121150031 10 / 27
3.2.20260121140029 10 / 27
3.2.20260121130037 10 / 27
3.2.20260121120029 10 / 27
3.2.20260121110028 10 / 27
3.2.20260121100029 10 / 27
3.2.20260121090029 10 / 27
3.2.20260121080042 10 / 27
3.2.20260121070039 10 / 27
3.2.20260121060040 10 / 27
3.2.20260121050029 10 / 27
3.2.20260121040027 10 / 27
3.2.20260121030028 10 / 27
3.2.20260121020029 10 / 27
Showing 100 of 9671 Next page →

v3.2.20260125050028

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v3.2.20260124010029

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v3.2.20260123100040

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v3.2.20260122130040

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.