← Home

@adguard/dnr-rulesets

npm

Utility to create AdGuard DNR rulesets for mv3 extensions

100
Versions
GPL-3.0-only
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures No source commit

Without SLSA provenance there is no cryptographic link between this tarball and the public source — the axios compromise (March 2026) relied on exactly this gap.

Maintainers

ameshkovmaximtopblakhard

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
source-diff obfuscated-file:dist/filters/local_script_rules.js AI (source-diff): This file contains AdGuard scriptlet filter rules — minified JS strings mapped to expanded implementations. This is expected content for an ad-blocking DNR ruleset package, not malicious obfuscation. ai
source-diff obfuscated-file:dist/filters/chromium-mv3/local_script_rules.js AI (source-diff): These files contain AdGuard's scriptlet lookup tables — minified ad-blocking JS used as object keys with expanded implementations as values. This is the package's documented design, not malicious obfuscation. ai
source-diff obfuscated-file:dist/filters/opera-mv3/local_script_rules.js AI (source-diff): Same as chromium-mv3 variant: AdGuard scriptlet lookup tables with minified keys and readable implementations. Expected build artifact for this package. ai
publish-pattern rapid-publish AI (publish-pattern): Package has 13,351 versions with timestamp-based version numbers, indicating a fully automated filter-list update pipeline. Rapid publishing is the normal operating mode for this package. ai
phantom-deps phantom-dep:chokidar AI (phantom-deps): CLI tool legitimately uses chokidar for file watching; declared in dependencies and referenced in config files. ai
dependencies unvetted-dep:@adguard/agtree AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
phantom-deps phantom-dep:@adguard/re2-wasm AI (phantom-deps): First-party AdGuard dependency declared in package.json; phantom-dep flag is a false positive for same-org packages. ai
phantom-deps phantom-dep:commander AI (phantom-deps): CLI tool legitimately uses commander for CLI argument parsing; declared in dependencies. ai
dependencies unvetted-dep:@adguard/logger AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
dependencies unvetted-dep:@adguard/re2-wasm AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
dependencies unvetted-dep:@adguard/tsurlfilter AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai

Versions (showing 100 of 9547)

Version Deps Published
4.0.20260320010101 10 / 29
4.0.20260319230053 10 / 29
4.0.20260319220050 10 / 29
4.0.20260319210059 10 / 29
4.0.20260319200057 10 / 29
4.0.20260319190456 10 / 29
4.0.20260319180054 10 / 29
4.0.20260319150118 10 / 29
4.0.20260319140101 10 / 29
4.0.20260319130132 10 / 29
4.0.20260319120138 10 / 29
4.0.20260319100640 10 / 29
4.0.20260319090150 10 / 29
4.0.20260319080117 10 / 29
4.0.20260319070056 10 / 29
4.0.20260319060103 10 / 29
4.0.20260319050102 10 / 29
4.0.20260319040058 10 / 29
4.0.20260319030107 10 / 29
4.0.20260319020103 10 / 29
4.0.20260319010101 10 / 29
4.0.20260319000139 10 / 29
4.0.20260318230052 10 / 29
4.0.20260318220055 10 / 29
4.0.20260318210053 10 / 29
4.0.20260318200052 10 / 29
4.0.20260318190053 10 / 29
4.0.20260318180112 10 / 29
4.0.20260318170123 10 / 29
4.0.20260318160626 10 / 29
4.0.20260318150132 10 / 29
4.0.20260318140203 10 / 29
4.0.20260318120059 10 / 29
4.0.20260318110103 10 / 29
4.0.20260318100220 10 / 29
4.0.20260318090057 10 / 29
4.0.20260318080108 10 / 29
4.0.20260318070125 10 / 29
4.0.20260318060121 10 / 29
4.0.20260318050053 10 / 29
4.0.20260318040100 10 / 29
4.0.20260318030055 10 / 29
4.0.20260318020052 10 / 29
4.0.20260318010116 10 / 29
4.0.20260318000505 10 / 29
4.0.20260317230051 10 / 29
4.0.20260317220053 10 / 29
4.0.20260317210102 10 / 29
4.0.20260317200111 10 / 29
4.0.20260317190059 10 / 29
4.0.20260317180054 10 / 29
4.0.20260317170111 10 / 29
4.0.20260317160105 10 / 29
4.0.20260317150104 10 / 29
4.0.20260317140114 10 / 29
4.0.20260317130102 10 / 29
4.0.20260317120102 10 / 29
4.0.20260317110110 10 / 29
4.0.20260317100104 10 / 29
4.0.20260317070050 10 / 29
4.0.20260317060103 10 / 29
4.0.20260317050054 10 / 29
4.0.20260317040050 10 / 29
4.0.20260317030052 10 / 29
4.0.20260317020053 10 / 29
4.0.20260317010127 10 / 29
4.0.20260317000109 10 / 29
4.0.20260316230052 10 / 29
4.0.20260316220054 10 / 29
4.0.20260316210053 10 / 29
4.0.20260316200113 10 / 29
4.0.20260316190055 10 / 29
4.0.20260316180059 10 / 29
4.0.20260316160057 10 / 29
4.0.20260316140106 10 / 29
4.0.20260316130103 10 / 29
4.0.20260316120125 10 / 29
4.0.20260316100119 10 / 29
4.0.20260316080102 10 / 29
4.0.20260316060102 10 / 29
4.0.20260316050052 10 / 29
4.0.20260316040051 10 / 29
4.0.20260316030244 10 / 29
4.0.20260316020045 10 / 29
4.0.20260316010055 10 / 29
4.0.20260316000119 10 / 29
4.0.20260315230049 10 / 29
4.0.20260315210051 10 / 29
4.0.20260315200050 10 / 29
4.0.20260315190054 10 / 29
4.0.20260315180045 10 / 29
4.0.20260315150058 10 / 29
4.0.20260315140051 10 / 29
4.0.20260315130054 10 / 29
4.0.20260315120054 10 / 29
4.0.20260315110104 10 / 29
4.0.20260315100101 10 / 29
4.0.20260315090059 10 / 29
4.0.20260315080047 10 / 29
4.0.20260315070050 10 / 29
Showing 100 of 9547 Next page →

v4.0.20260319120138

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.20260318090057

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.20260318060121

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.20260317020053

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.20260316220054

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.20260315230049

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.0.20260315100101

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.