← Home

@adguard/dnr-rulesets

npm

Utility to create AdGuard DNR rulesets for mv3 extensions

100
Versions
GPL-3.0-only
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures No source commit

Without SLSA provenance there is no cryptographic link between this tarball and the public source — the axios compromise (March 2026) relied on exactly this gap.

Maintainers

ameshkovmaximtopblakhard

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
source-diff obfuscated-file:dist/filters/local_script_rules.js AI (source-diff): This file contains AdGuard scriptlet filter rules — minified JS strings mapped to expanded implementations. This is expected content for an ad-blocking DNR ruleset package, not malicious obfuscation. ai
source-diff obfuscated-file:dist/filters/chromium-mv3/local_script_rules.js AI (source-diff): These files contain AdGuard's scriptlet lookup tables — minified ad-blocking JS used as object keys with expanded implementations as values. This is the package's documented design, not malicious obfuscation. ai
source-diff obfuscated-file:dist/filters/opera-mv3/local_script_rules.js AI (source-diff): Same as chromium-mv3 variant: AdGuard scriptlet lookup tables with minified keys and readable implementations. Expected build artifact for this package. ai
publish-pattern rapid-publish AI (publish-pattern): Package has 13,351 versions with timestamp-based version numbers, indicating a fully automated filter-list update pipeline. Rapid publishing is the normal operating mode for this package. ai
phantom-deps phantom-dep:chokidar AI (phantom-deps): CLI tool legitimately uses chokidar for file watching; declared in dependencies and referenced in config files. ai
dependencies unvetted-dep:@adguard/agtree AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
phantom-deps phantom-dep:@adguard/re2-wasm AI (phantom-deps): First-party AdGuard dependency declared in package.json; phantom-dep flag is a false positive for same-org packages. ai
phantom-deps phantom-dep:commander AI (phantom-deps): CLI tool legitimately uses commander for CLI argument parsing; declared in dependencies. ai
dependencies unvetted-dep:@adguard/logger AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
dependencies unvetted-dep:@adguard/re2-wasm AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
dependencies unvetted-dep:@adguard/tsurlfilter AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai

Versions (showing 100 of 9493)

Version Deps Published
4.1.20260323040042 10 / 29
4.1.20260323030054 10 / 29
4.1.20260323020050 10 / 29
4.1.20260323010101 10 / 29
4.1.20260323000122 10 / 29
4.1.20260322230054 10 / 29
4.1.20260322220048 10 / 29
4.1.20260322210103 10 / 29
4.1.20260322200054 10 / 29
4.1.20260322190057 10 / 29
4.1.20260322180053 10 / 29
4.1.20260322170048 10 / 29
4.1.20260322160046 10 / 29
4.1.20260322150104 10 / 29
4.1.20260322140049 10 / 29
4.1.20260322130048 10 / 29
4.1.20260322120051 10 / 29
4.1.20260322110050 10 / 29
4.1.20260322100055 10 / 29
4.1.20260322090057 10 / 29
4.1.20260322080047 10 / 29
4.1.20260322070051 10 / 29
4.1.20260322060055 10 / 29
4.1.20260322050102 10 / 29
4.1.20260322040051 10 / 29
4.1.20260322030054 10 / 29
4.1.20260322020054 10 / 29
4.1.20260322010046 10 / 29
4.1.20260321230057 10 / 29
4.1.20260321220050 10 / 29
4.1.20260321210059 10 / 29
4.1.20260321200052 10 / 29
4.1.20260321190046 10 / 29
4.1.20260321180045 10 / 29
4.1.20260321170043 10 / 29
4.1.20260321160052 10 / 29
4.1.20260321150052 10 / 29
4.1.20260321140057 10 / 29
4.1.20260321130047 10 / 29
4.1.20260321120053 10 / 29
4.1.20260321110056 10 / 29
4.1.20260321100045 10 / 29
4.1.20260321090055 10 / 29
4.1.20260321080049 10 / 29
4.1.20260321070054 10 / 29
4.1.20260321060100 10 / 29
4.1.20260321050110 10 / 29
4.1.20260321040057 10 / 29
4.1.20260321030057 10 / 29
4.1.20260321020057 10 / 29
4.1.20260321010048 10 / 29
4.1.20260321000114 10 / 29
4.1.20260320230053 10 / 29
4.1.20260320220055 10 / 29
4.1.20260320210056 10 / 29
4.1.20260320200057 10 / 29
4.1.20260320190042 10 / 29
4.1.20260320180045 10 / 29
4.1.20260320170059 10 / 29
4.1.20260320160109 10 / 29
4.1.20260320150119 10 / 29
4.1.20260320140136 10 / 29
4.1.20260320130139 10 / 29
4.1.20260320120201 10 / 29
4.1.20260320110103 10 / 29
4.1.20260320100106 10 / 29
4.1.20260320090121 10 / 29
4.1.20260320080106 10 / 29
4.1.20260320070051 10 / 29
4.1.20260320060050 10 / 29
4.1.20260320050046 10 / 29
4.1.20260320040108 10 / 29
4.1.20260320030104 10 / 29
4.1.20260320020101 10 / 29
4.1.20260320010057 10 / 29
4.1.20260320000114 10 / 29
4.1.20260319230049 10 / 29
4.1.20260319220051 10 / 29
4.1.20260319210100 10 / 29
4.1.20260319200047 10 / 29
4.1.20260319190503 10 / 29
4.1.20260319180051 10 / 29
4.1.20260319170104 10 / 29
4.1.20260319160158 10 / 29
4.1.20260319150107 10 / 29
4.1.20260319140054 10 / 29
4.1.20260319130133 10 / 29
4.1.20260319120200 10 / 29
4.1.20260319110111 10 / 29
4.1.20260319100948 10 / 29
4.1.20260319090218 10 / 29
4.1.20260319080117 10 / 29
4.1.20260319070110 10 / 29
4.1.20260319060050 10 / 29
4.1.20260319050049 10 / 29
4.1.20260319040058 10 / 29
4.1.20260319030101 10 / 29
4.1.20260319020056 10 / 29
4.1.20260319010050 10 / 29
4.1.20260319000139 10 / 29
Showing 100 of 9493 Next page →

v4.1.20260321220050

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.1.20260321110056

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.1.20260320180045

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.1.20260320130139

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.1.20260320090121

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.1.20260319230049

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.1.20260319060050

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.