← Home

@adguard/dnr-rulesets

npm

Utility to create AdGuard DNR rulesets for mv3 extensions

100
Versions
GPL-3.0-only
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures No source commit

Without SLSA provenance there is no cryptographic link between this tarball and the public source — the axios compromise (March 2026) relied on exactly this gap.

Maintainers

ameshkovmaximtopblakhard

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
source-diff obfuscated-file:dist/filters/local_script_rules.js AI (source-diff): This file contains AdGuard scriptlet filter rules — minified JS strings mapped to expanded implementations. This is expected content for an ad-blocking DNR ruleset package, not malicious obfuscation. ai
source-diff obfuscated-file:dist/filters/chromium-mv3/local_script_rules.js AI (source-diff): These files contain AdGuard's scriptlet lookup tables — minified ad-blocking JS used as object keys with expanded implementations as values. This is the package's documented design, not malicious obfuscation. ai
source-diff obfuscated-file:dist/filters/opera-mv3/local_script_rules.js AI (source-diff): Same as chromium-mv3 variant: AdGuard scriptlet lookup tables with minified keys and readable implementations. Expected build artifact for this package. ai
publish-pattern rapid-publish AI (publish-pattern): Package has 13,351 versions with timestamp-based version numbers, indicating a fully automated filter-list update pipeline. Rapid publishing is the normal operating mode for this package. ai
phantom-deps phantom-dep:chokidar AI (phantom-deps): CLI tool legitimately uses chokidar for file watching; declared in dependencies and referenced in config files. ai
dependencies unvetted-dep:@adguard/agtree AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
phantom-deps phantom-dep:@adguard/re2-wasm AI (phantom-deps): First-party AdGuard dependency declared in package.json; phantom-dep flag is a false positive for same-org packages. ai
phantom-deps phantom-dep:commander AI (phantom-deps): CLI tool legitimately uses commander for CLI argument parsing; declared in dependencies. ai
dependencies unvetted-dep:@adguard/logger AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
dependencies unvetted-dep:@adguard/re2-wasm AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
dependencies unvetted-dep:@adguard/tsurlfilter AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai

Versions (showing 100 of 9560)

Version Deps Published
4.0.20260228110041 10 / 29
4.0.20260228090047 10 / 29
4.0.20260228080053 10 / 29
4.0.20260228070049 10 / 29
4.0.20260228060047 10 / 29
4.0.20260228050057 10 / 29
4.0.20260228040048 10 / 29
4.0.20260228020058 10 / 29
4.0.20260228010055 10 / 29
4.0.20260227230050 10 / 29
4.0.20260227220053 10 / 29
4.0.20260227210049 10 / 29
4.0.20260227200043 10 / 29
4.0.20260227190049 10 / 29
4.0.20260227180052 10 / 29
4.0.20260227170053 10 / 29
4.0.20260227160050 10 / 29
4.0.20260227150139 10 / 29
4.0.20260227140106 10 / 29
4.0.20260227130058 10 / 29
4.0.20260227120110 10 / 29
4.0.20260227110156 10 / 29
4.0.20260227100051 10 / 29
4.0.20260227090111 10 / 29
4.0.20260227080055 10 / 29
4.0.20260227070105 10 / 29
4.0.20260227060047 10 / 29
4.0.20260227050108 10 / 29
4.0.20260227040050 10 / 29
4.0.20260227030101 10 / 29
4.0.20260227010039 10 / 29
4.0.20260227000120 10 / 29
4.0.20260226230051 10 / 29
4.0.20260226220046 10 / 29
4.0.20260226210052 10 / 29
4.0.20260226200105 10 / 29
4.0.20260226180056 10 / 29
4.0.20260226170053 10 / 29
4.0.20260226160053 10 / 29
4.0.20260226150049 10 / 29
4.0.20260226140140 10 / 29
4.0.20260226130100 10 / 29
4.0.20260226120100 10 / 29
4.0.20260226110051 10 / 29
4.0.20260226100056 10 / 29
4.0.20260226090052 10 / 29
4.0.20260226080131 10 / 29
4.0.20260226050055 10 / 29
4.0.20260226040046 10 / 29
4.0.20260226020043 10 / 29
4.0.20260226010047 10 / 29
4.0.20260226000057 10 / 29
4.0.20260225230128 10 / 29
4.0.20260225220049 10 / 29
4.0.20260225210057 10 / 29
4.0.20260225200052 10 / 29
4.0.20260225190045 10 / 29
4.0.20260225180052 10 / 29
4.0.20260225170048 10 / 29
4.0.20260225150055 10 / 29
4.0.20260225140056 10 / 29
4.0.20260225130058 10 / 29
4.0.20260225120053 10 / 29
4.0.20260225110103 10 / 29
4.0.20260225100110 10 / 29
4.0.20260225090104 10 / 29
4.0.20260225080054 10 / 29
4.0.20260225070052 10 / 29
4.0.20260225060135 10 / 29
4.0.20260225050100 10 / 29
4.0.20260225030053 10 / 29
4.0.20260225020047 10 / 29
4.0.20260225010051 10 / 29
4.0.20260225000107 10 / 29
4.0.20260224220051 10 / 29
4.0.20260224210054 10 / 29
4.0.20260224190103 10 / 29
4.0.20260224180049 10 / 29
4.0.20260224170108 10 / 29
4.0.20260224140056 10 / 29
4.0.20260224130104 10 / 29
4.0.20260224090136 10 / 29
4.0.20260224080113 10 / 29
4.0.20260224070102 10 / 29
4.0.20260224060132 10 / 29
4.0.20260224020050 10 / 29
4.0.20260224010047 10 / 29
4.0.20260224000114 10 / 29
4.0.20260223230057 10 / 29
4.0.20260223220129 10 / 29
4.0.20260223200050 10 / 29
4.0.20260223190051 10 / 29
4.0.20260223180053 10 / 29
4.0.20260223170053 10 / 29
4.0.20260223160104 10 / 29
4.0.20260223140050 10 / 29
4.0.20260223120047 10 / 29
4.0.20260223110058 10 / 29
4.0.20260223100045 10 / 29
4.0.20260223090048 10 / 29
Showing 100 of 9560 Next page →

v4.0.20260228050057

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.20260227220053

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.20260227040050

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.20260225110103

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.20260224090136

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.