← Home

@adguard/dnr-rulesets

npm

Utility to create AdGuard DNR rulesets for mv3 extensions

100
Versions
GPL-3.0-only
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures No source commit

Without SLSA provenance there is no cryptographic link between this tarball and the public source — the axios compromise (March 2026) relied on exactly this gap.

Maintainers

ameshkovmaximtopblakhard

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
source-diff obfuscated-file:dist/filters/local_script_rules.js AI (source-diff): This file contains AdGuard scriptlet filter rules — minified JS strings mapped to expanded implementations. This is expected content for an ad-blocking DNR ruleset package, not malicious obfuscation. ai
source-diff obfuscated-file:dist/filters/chromium-mv3/local_script_rules.js AI (source-diff): These files contain AdGuard's scriptlet lookup tables — minified ad-blocking JS used as object keys with expanded implementations as values. This is the package's documented design, not malicious obfuscation. ai
source-diff obfuscated-file:dist/filters/opera-mv3/local_script_rules.js AI (source-diff): Same as chromium-mv3 variant: AdGuard scriptlet lookup tables with minified keys and readable implementations. Expected build artifact for this package. ai
publish-pattern rapid-publish AI (publish-pattern): Package has 13,351 versions with timestamp-based version numbers, indicating a fully automated filter-list update pipeline. Rapid publishing is the normal operating mode for this package. ai
phantom-deps phantom-dep:chokidar AI (phantom-deps): CLI tool legitimately uses chokidar for file watching; declared in dependencies and referenced in config files. ai
dependencies unvetted-dep:@adguard/agtree AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
phantom-deps phantom-dep:@adguard/re2-wasm AI (phantom-deps): First-party AdGuard dependency declared in package.json; phantom-dep flag is a false positive for same-org packages. ai
phantom-deps phantom-dep:commander AI (phantom-deps): CLI tool legitimately uses commander for CLI argument parsing; declared in dependencies. ai
dependencies unvetted-dep:@adguard/logger AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
dependencies unvetted-dep:@adguard/re2-wasm AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
dependencies unvetted-dep:@adguard/tsurlfilter AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai

Versions (showing 100 of 9667)

Version Deps Published
3.2.20260130040030 10 / 27
3.2.20260130030030 10 / 27
3.2.20260130020032 10 / 27
3.2.20260130010030 10 / 27
3.2.20260129230030 10 / 27
3.2.20260129220029 10 / 27
3.2.20260129210030 10 / 27
3.2.20260129200029 10 / 27
3.2.20260129190030 10 / 27
3.2.20260129180030 10 / 27
3.2.20260129170032 10 / 27
3.2.20260129160032 10 / 27
3.2.20260129150032 10 / 27
3.2.20260129140036 10 / 27
3.2.20260129130031 10 / 27
3.2.20260129120032 10 / 27
3.2.20260129110033 10 / 27
3.2.20260129100035 10 / 27
3.2.20260129094642 10 / 27
3.2.20260129090034 10 / 27
3.2.20260128211527 10 / 27
3.2.20260128200032 10 / 27
3.2.20260128190033 10 / 27
3.2.20260128180032 10 / 27
3.2.20260128170035 10 / 27
3.2.20260128160709 10 / 27
3.2.20260128150032 10 / 27
3.2.20260128140030 10 / 27
3.2.20260128130030 10 / 27
3.2.20260128120030 10 / 27
3.2.20260128110030 10 / 27
3.2.20260128100039 10 / 27
3.2.20260128090052 10 / 27
3.2.20260128080030 10 / 27
3.2.20260128070029 10 / 27
3.2.20260128060031 10 / 27
3.2.20260128050029 10 / 27
3.2.20260128040038 10 / 27
3.2.20260128030029 10 / 27
3.2.20260128020030 10 / 27
3.2.20260128010029 10 / 27
3.2.20260128000030 10 / 27
3.2.20260127230028 10 / 27
3.2.20260127220028 10 / 27
3.2.20260127210028 10 / 27
3.2.20260127200028 10 / 27
3.2.20260127190029 10 / 27
3.2.20260127180030 10 / 27
3.2.20260127170028 10 / 27
3.2.20260127160031 10 / 27
3.2.20260127150030 10 / 27
3.2.20260127140029 10 / 27
3.2.20260127130031 10 / 27
3.2.20260127120032 10 / 27
3.2.20260127110030 10 / 27
3.2.20260127100034 10 / 27
3.2.20260127090029 10 / 27
3.2.20260127070038 10 / 27
3.2.20260127060032 10 / 27
3.2.20260127050029 10 / 27
3.2.20260127040028 10 / 27
3.2.20260127030029 10 / 27
3.2.20260127020030 10 / 27
3.2.20260127010029 10 / 27
3.2.20260127000033 10 / 27
3.2.20260126230028 10 / 27
3.2.20260126220030 10 / 27
3.2.20260126210029 10 / 27
3.2.20260126200029 10 / 27
3.2.20260126190030 10 / 27
3.2.20260126180029 10 / 27
3.2.20260126170030 10 / 27
3.2.20260126160034 10 / 27
3.2.20260126150030 10 / 27
3.2.20260126140028 10 / 27
3.2.20260126130035 10 / 27
3.2.20260126120029 10 / 27
3.2.20260126110029 10 / 27
3.2.20260126100028 10 / 27
3.2.20260126090029 10 / 27
3.2.20260126080028 10 / 27
3.2.20260126070029 10 / 27
3.2.20260126060038 10 / 27
3.2.20260126050029 10 / 27
3.2.20260126040028 10 / 27
3.2.20260126030030 10 / 27
3.2.20260126020027 10 / 27
3.2.20260126010029 10 / 27
3.2.20260126000031 10 / 27
3.2.20260125230028 10 / 27
3.2.20260125220028 10 / 27
3.2.20260125210029 10 / 27
3.2.20260125200029 10 / 27
3.2.20260125190028 10 / 27
3.2.20260125180028 10 / 27
3.2.20260125160028 10 / 27
3.2.20260125150028 10 / 27
3.2.20260125140028 10 / 27
3.2.20260125130028 10 / 27
3.2.20260125120028 10 / 27
Showing 100 of 9667 Next page →

v3.2.20260128010029

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v3.2.20260127200028

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v3.2.20260126230028

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.