← Home

@adguard/dnr-rulesets

npm

Utility to create AdGuard DNR rulesets for mv3 extensions

100
Versions
GPL-3.0-only
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures No source commit

Without SLSA provenance there is no cryptographic link between this tarball and the public source — the axios compromise (March 2026) relied on exactly this gap.

Maintainers

ameshkovmaximtopblakhard

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
source-diff obfuscated-file:dist/filters/local_script_rules.js AI (source-diff): This file contains AdGuard scriptlet filter rules — minified JS strings mapped to expanded implementations. This is expected content for an ad-blocking DNR ruleset package, not malicious obfuscation. ai
source-diff obfuscated-file:dist/filters/chromium-mv3/local_script_rules.js AI (source-diff): These files contain AdGuard's scriptlet lookup tables — minified ad-blocking JS used as object keys with expanded implementations as values. This is the package's documented design, not malicious obfuscation. ai
source-diff obfuscated-file:dist/filters/opera-mv3/local_script_rules.js AI (source-diff): Same as chromium-mv3 variant: AdGuard scriptlet lookup tables with minified keys and readable implementations. Expected build artifact for this package. ai
publish-pattern rapid-publish AI (publish-pattern): Package has 13,351 versions with timestamp-based version numbers, indicating a fully automated filter-list update pipeline. Rapid publishing is the normal operating mode for this package. ai
phantom-deps phantom-dep:chokidar AI (phantom-deps): CLI tool legitimately uses chokidar for file watching; declared in dependencies and referenced in config files. ai
dependencies unvetted-dep:@adguard/agtree AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
phantom-deps phantom-dep:@adguard/re2-wasm AI (phantom-deps): First-party AdGuard dependency declared in package.json; phantom-dep flag is a false positive for same-org packages. ai
phantom-deps phantom-dep:commander AI (phantom-deps): CLI tool legitimately uses commander for CLI argument parsing; declared in dependencies. ai
dependencies unvetted-dep:@adguard/logger AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
dependencies unvetted-dep:@adguard/re2-wasm AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
dependencies unvetted-dep:@adguard/tsurlfilter AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai

Versions (showing 100 of 9625)

Version Deps Published
3.3.20260305070047 10 / 29
3.3.20260305060046 10 / 29
3.3.20260305050045 10 / 29
3.3.20260305040042 10 / 29
3.3.20260305030045 10 / 29
3.3.20260305020046 10 / 29
3.3.20260305010049 10 / 29
3.3.20260305000116 10 / 29
3.3.20260304230049 10 / 29
3.3.20260304210047 10 / 29
3.3.20260304200048 10 / 29
3.3.20260304190047 10 / 29
3.3.20260304180139 10 / 29
3.3.20260304150206 10 / 29
3.3.20260304130042 10 / 29
3.3.20260304120108 10 / 29
3.3.20260304100146 10 / 29
3.3.20260304090101 10 / 29
3.3.20260304080044 10 / 29
3.3.20260304060113 10 / 29
3.3.20260304050055 10 / 29
3.3.20260304040041 10 / 29
3.3.20260304010041 10 / 29
3.3.20260303230044 10 / 29
3.3.20260303220044 10 / 29
3.3.20260303210047 10 / 29
3.3.20260303190049 10 / 29
3.3.20260303180043 10 / 29
3.3.20260303170057 10 / 29
3.3.20260303160044 10 / 29
3.3.20260303150052 10 / 29
3.3.20260303141753 10 / 29
3.3.20260303130123 10 / 29
3.3.20260303120113 10 / 29
3.3.20260303110056 10 / 29
3.3.20260303090114 10 / 29
3.3.20260303080112 10 / 29
3.3.20260303070111 10 / 29
3.3.20260303060044 10 / 29
3.3.20260303050108 10 / 29
3.3.20260303040049 10 / 29
3.3.20260303020050 10 / 29
3.3.20260303000116 10 / 29
3.3.20260302230048 10 / 29
3.3.20260302220051 10 / 29
3.3.20260302210054 10 / 29
3.3.20260302190535 10 / 29
3.3.20260302160057 10 / 29
3.3.20260302150103 10 / 29
3.3.20260302140058 10 / 29
3.3.20260302130132 10 / 29
3.3.20260302120145 10 / 29
3.3.20260302110055 10 / 29
3.3.20260302100047 10 / 29
3.3.20260302090057 10 / 29
3.3.20260302080050 10 / 29
3.3.20260302060046 10 / 29
3.3.20260302050045 10 / 29
3.3.20260302030046 10 / 29
3.3.20260302020047 10 / 29
3.3.20260302010044 10 / 29
3.3.20260302000115 10 / 29
3.3.20260301230059 10 / 29
3.3.20260301220052 10 / 29
3.3.20260301210050 10 / 29
3.3.20260301200057 10 / 29
3.3.20260301190044 10 / 29
3.3.20260301180049 10 / 29
3.3.20260301160050 10 / 29
3.3.20260301150044 10 / 29
3.3.20260301140045 10 / 29
3.3.20260301130043 10 / 29
3.3.20260301120042 10 / 29
3.3.20260301090048 10 / 29
3.3.20260301080046 10 / 29
3.3.20260301050106 10 / 29
3.3.20260301040055 10 / 29
3.3.20260301030043 10 / 29
3.3.20260301010038 10 / 29
3.3.20260301000056 10 / 29
3.3.20260228230043 10 / 29
3.3.20260228220043 10 / 29
3.3.20260228210051 10 / 29
3.3.20260228200048 10 / 29
3.3.20260228190049 10 / 29
3.3.20260228180043 10 / 29
3.3.20260228160044 10 / 29
3.3.20260228150052 10 / 29
3.3.20260228130044 10 / 29
3.3.20260228120041 10 / 29
3.3.20260228110050 10 / 29
3.3.20260228100047 10 / 29
3.3.20260228090058 10 / 29
3.3.20260228080053 10 / 29
3.3.20260228060107 10 / 29
3.3.20260228050055 10 / 29
3.3.20260228040055 10 / 29
3.3.20260228030050 10 / 29
3.3.20260228020048 10 / 29
3.3.20260228000050 10 / 29
Showing 100 of 9625 Next page →

v3.3.20260303130123

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v3.3.20260303060044

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v3.3.20260303040049

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.