← Home

@adguard/dnr-rulesets

npm

Utility to create AdGuard DNR rulesets for mv3 extensions

100
Versions
GPL-3.0-only
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures No source commit

Without SLSA provenance there is no cryptographic link between this tarball and the public source — the axios compromise (March 2026) relied on exactly this gap.

Maintainers

ameshkovmaximtopblakhard

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
source-diff obfuscated-file:dist/filters/local_script_rules.js AI (source-diff): This file contains AdGuard scriptlet filter rules — minified JS strings mapped to expanded implementations. This is expected content for an ad-blocking DNR ruleset package, not malicious obfuscation. ai
source-diff obfuscated-file:dist/filters/chromium-mv3/local_script_rules.js AI (source-diff): These files contain AdGuard's scriptlet lookup tables — minified ad-blocking JS used as object keys with expanded implementations as values. This is the package's documented design, not malicious obfuscation. ai
source-diff obfuscated-file:dist/filters/opera-mv3/local_script_rules.js AI (source-diff): Same as chromium-mv3 variant: AdGuard scriptlet lookup tables with minified keys and readable implementations. Expected build artifact for this package. ai
publish-pattern rapid-publish AI (publish-pattern): Package has 13,351 versions with timestamp-based version numbers, indicating a fully automated filter-list update pipeline. Rapid publishing is the normal operating mode for this package. ai
phantom-deps phantom-dep:chokidar AI (phantom-deps): CLI tool legitimately uses chokidar for file watching; declared in dependencies and referenced in config files. ai
dependencies unvetted-dep:@adguard/agtree AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
phantom-deps phantom-dep:@adguard/re2-wasm AI (phantom-deps): First-party AdGuard dependency declared in package.json; phantom-dep flag is a false positive for same-org packages. ai
phantom-deps phantom-dep:commander AI (phantom-deps): CLI tool legitimately uses commander for CLI argument parsing; declared in dependencies. ai
dependencies unvetted-dep:@adguard/logger AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
dependencies unvetted-dep:@adguard/re2-wasm AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
dependencies unvetted-dep:@adguard/tsurlfilter AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai

Versions (showing 100 of 9646)

Version Deps Published
3.3.20260203080043 10 / 29
3.3.20260203060031 10 / 29
3.3.20260203050043 10 / 29
3.3.20260203040034 10 / 29
3.3.20260203030035 10 / 29
3.3.20260203020038 10 / 29
3.3.20260203010035 10 / 29
3.3.20260203000043 10 / 29
3.3.20260202230036 10 / 29
3.3.20260202220030 10 / 29
3.3.20260202210038 10 / 29
3.3.20260202200034 10 / 29
3.3.20260202180034 10 / 29
3.3.20260202170034 10 / 29
3.3.20260202160033 10 / 29
3.3.20260202150033 10 / 29
3.3.20260202140038 10 / 29
3.3.20260202130032 10 / 29
3.3.20260202110031 10 / 29
3.3.20260202100032 10 / 29
3.3.20260202090103 10 / 29
3.3.20260202080042 10 / 29
3.3.20260202070030 10 / 29
3.3.20260202060037 10 / 29
3.3.20260202050029 10 / 29
3.3.20260202030033 10 / 29
3.3.20260202020030 10 / 29
3.3.20260202010030 10 / 29
3.3.20260202000036 10 / 29
3.3.20260201230031 10 / 29
3.3.20260201210031 10 / 29
3.3.20260201200030 10 / 29
3.3.20260201190031 10 / 29
3.3.20260201180030 10 / 29
3.3.20260201170030 10 / 29
3.3.20260201160031 10 / 29
3.3.20260201150031 10 / 29
3.3.20260201140031 10 / 29
3.3.20260201130031 10 / 29
3.3.20260201120029 10 / 29
3.3.20260201110033 10 / 29
3.3.20260201100030 10 / 29
3.3.20260201090038 10 / 29
3.3.20260201080039 10 / 29
3.3.20260201060042 10 / 29
3.3.20260201050030 10 / 29
3.3.20260201040033 10 / 29
3.3.20260201030030 10 / 29
3.3.20260201020029 10 / 29
3.3.20260201010029 10 / 29
3.3.20260201000034 10 / 29
3.3.20260131230030 10 / 29
3.3.20260131220031 10 / 29
3.3.20260131210032 10 / 29
3.3.20260131200030 10 / 29
3.3.20260131190029 10 / 29
3.3.20260131180031 10 / 29
3.3.20260131170030 10 / 29
3.3.20260131160029 10 / 29
3.3.20260131140029 10 / 29
3.3.20260131130030 10 / 29
3.3.20260131120030 10 / 29
3.3.20260131110029 10 / 29
3.3.20260131100029 10 / 29
3.3.20260131090030 10 / 29
3.3.20260131070039 10 / 29
3.3.20260131060050 10 / 29
3.3.20260131050035 10 / 29
3.3.20260131030033 10 / 29
3.3.20260131020030 10 / 29
3.3.20260131010030 10 / 29
3.3.20260131000034 10 / 29
3.3.20260130220030 10 / 29
3.3.20260130210032 10 / 29
3.3.20260130200030 10 / 29
3.3.20260130190030 10 / 29
3.3.20260130180031 10 / 29
3.3.20260130170029 10 / 29
3.3.20260130160036 10 / 29
3.3.20260130150314 10 / 29
3.3.20260130140034 10 / 29
3.3.20260130130033 10 / 29
3.3.20260130120034 10 / 29
3.3.20260130110034 10 / 29
3.3.20260130100118 10 / 29
3.3.20260130090034 10 / 29
3.3.20260130080033 10 / 29
3.3.20260130070044 10 / 29
3.3.20260130060048 10 / 29
3.3.20260130050031 10 / 29
3.3.20260130040030 10 / 29
3.3.20260130030031 10 / 29
3.3.20260130010029 10 / 29
3.3.20260130000043 10 / 29
3.3.20260129230029 10 / 29
3.3.20260129220030 10 / 29
3.3.20260129210031 10 / 29
3.3.20260129200030 10 / 29
3.3.20260129190031 10 / 29
3.3.20260129180030 10 / 29
Showing 100 of 9646 Next page →

v3.3.20260201080039

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v3.3.20260131220031

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v3.3.20260130080033

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v3.3.20260129210031

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.