← Home

@adguard/dnr-rulesets

npm

Utility to create AdGuard DNR rulesets for mv3 extensions

100
Versions
GPL-3.0-only
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures No source commit

Without SLSA provenance there is no cryptographic link between this tarball and the public source — the axios compromise (March 2026) relied on exactly this gap.

Maintainers

ameshkovmaximtopblakhard

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
source-diff obfuscated-file:dist/filters/local_script_rules.js AI (source-diff): This file contains AdGuard scriptlet filter rules — minified JS strings mapped to expanded implementations. This is expected content for an ad-blocking DNR ruleset package, not malicious obfuscation. ai
source-diff obfuscated-file:dist/filters/chromium-mv3/local_script_rules.js AI (source-diff): These files contain AdGuard's scriptlet lookup tables — minified ad-blocking JS used as object keys with expanded implementations as values. This is the package's documented design, not malicious obfuscation. ai
source-diff obfuscated-file:dist/filters/opera-mv3/local_script_rules.js AI (source-diff): Same as chromium-mv3 variant: AdGuard scriptlet lookup tables with minified keys and readable implementations. Expected build artifact for this package. ai
publish-pattern rapid-publish AI (publish-pattern): Package has 13,351 versions with timestamp-based version numbers, indicating a fully automated filter-list update pipeline. Rapid publishing is the normal operating mode for this package. ai
phantom-deps phantom-dep:chokidar AI (phantom-deps): CLI tool legitimately uses chokidar for file watching; declared in dependencies and referenced in config files. ai
dependencies unvetted-dep:@adguard/agtree AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
phantom-deps phantom-dep:@adguard/re2-wasm AI (phantom-deps): First-party AdGuard dependency declared in package.json; phantom-dep flag is a false positive for same-org packages. ai
phantom-deps phantom-dep:commander AI (phantom-deps): CLI tool legitimately uses commander for CLI argument parsing; declared in dependencies. ai
dependencies unvetted-dep:@adguard/logger AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
dependencies unvetted-dep:@adguard/re2-wasm AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
dependencies unvetted-dep:@adguard/tsurlfilter AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai

Versions (showing 100 of 9575)

Version Deps Published
4.0.20260208230038 10 / 29
4.0.20260208220036 10 / 29
4.0.20260208200036 10 / 29
4.0.20260208190034 10 / 29
4.0.20260208180038 10 / 29
4.0.20260208170035 10 / 29
4.0.20260208160039 10 / 29
4.0.20260208150036 10 / 29
4.0.20260208140038 10 / 29
4.0.20260208120040 10 / 29
4.0.20260208100038 10 / 29
4.0.20260208090039 10 / 29
4.0.20260208080034 10 / 29
4.0.20260208070038 10 / 29
4.0.20260208050040 10 / 29
4.0.20260208030037 10 / 29
4.0.20260208020041 10 / 29
4.0.20260208010036 10 / 29
4.0.20260208000038 10 / 29
4.0.20260207230035 10 / 29
4.0.20260207220036 10 / 29
4.0.20260207210037 10 / 29
4.0.20260207200037 10 / 29
4.0.20260207190037 10 / 29
4.0.20260207180037 10 / 29
4.0.20260207170036 10 / 29
4.0.20260207160036 10 / 29
4.0.20260207150038 10 / 29
4.0.20260207120038 10 / 29
4.0.20260207110032 10 / 29
4.0.20260207100036 10 / 29
4.0.20260207080035 10 / 29
4.0.20260207070052 10 / 29
4.0.20260207060031 10 / 29
4.0.20260207050042 10 / 29
4.0.20260207040035 10 / 29
4.0.20260207030040 10 / 29
4.0.20260207020040 10 / 29
4.0.20260207010036 10 / 29
4.0.20260207000039 10 / 29
4.0.20260206230036 10 / 29
4.0.20260206220037 10 / 29
4.0.20260206200033 10 / 29
4.0.20260206190034 10 / 29
4.0.20260206170033 10 / 29
4.0.20260206150043 10 / 29
4.0.20260206130038 10 / 29
4.0.20260206120110 10 / 29
4.0.20260206110040 10 / 29
4.0.20260206100036 10 / 29
4.0.20260206090048 10 / 29
4.0.20260206080036 10 / 29
4.0.20260206070033 10 / 29
4.0.20260206060032 10 / 29
4.0.20260206050036 10 / 29
4.0.20260206040038 10 / 29
4.0.20260206020038 10 / 29
4.0.20260206010036 10 / 29
4.0.20260206000046 10 / 29
4.0.20260205230038 10 / 29
4.0.20260205210037 10 / 29
4.0.20260205190038 10 / 29
4.0.20260205180041 10 / 29
4.0.20260205170029 10 / 29
4.0.20260205160036 10 / 29
4.0.20260205150035 10 / 29
4.0.20260205130037 10 / 29
4.0.20260205120042 10 / 29
4.0.20260205110035 10 / 29
4.0.20260205100048 10 / 29
4.0.20260205090041 10 / 29
4.0.20260205070044 10 / 29
4.0.20260205060058 10 / 29
4.0.20260205050042 10 / 29
4.0.20260205040037 10 / 29
4.0.20260205030040 10 / 29
4.0.20260205020038 10 / 29
4.0.20260205010034 10 / 29
4.0.20260205000039 10 / 29
4.0.20260204230036 10 / 29
4.0.20260204200041 10 / 29
4.0.20260204190035 10 / 29
4.0.20260204180042 10 / 29
4.0.20260204170036 10 / 29
4.0.20260204160039 10 / 29
4.0.20260204140038 10 / 29
4.0.20260204130038 10 / 29
4.0.20260204120043 10 / 29
4.0.20260204110038 10 / 29
4.0.20260204100042 10 / 29
4.0.20260204090044 10 / 29
4.0.20260204080033 10 / 29
4.0.20260204070035 10 / 29
4.0.20260204060030 10 / 29
4.0.20260204050035 10 / 29
4.0.20260204040037 10 / 29
4.0.20260204030037 10 / 29
4.0.20260204020035 10 / 29
4.0.20260204010037 10 / 29
4.0.20260204000042 10 / 29
Showing 100 of 9575 Next page →

v4.0.20260208100038

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.20260208050040

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.20260207100036

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.20260207020040

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.20260205210037

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.20260204170036

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.20260204080033

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.