← Home

@adguard/dnr-rulesets

npm

Utility to create AdGuard DNR rulesets for mv3 extensions

100
Versions
GPL-3.0-only
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures No source commit

Without SLSA provenance there is no cryptographic link between this tarball and the public source — the axios compromise (March 2026) relied on exactly this gap.

Maintainers

ameshkovmaximtopblakhard

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
source-diff obfuscated-file:dist/filters/local_script_rules.js AI (source-diff): This file contains AdGuard scriptlet filter rules — minified JS strings mapped to expanded implementations. This is expected content for an ad-blocking DNR ruleset package, not malicious obfuscation. ai
source-diff obfuscated-file:dist/filters/chromium-mv3/local_script_rules.js AI (source-diff): These files contain AdGuard's scriptlet lookup tables — minified ad-blocking JS used as object keys with expanded implementations as values. This is the package's documented design, not malicious obfuscation. ai
source-diff obfuscated-file:dist/filters/opera-mv3/local_script_rules.js AI (source-diff): Same as chromium-mv3 variant: AdGuard scriptlet lookup tables with minified keys and readable implementations. Expected build artifact for this package. ai
publish-pattern rapid-publish AI (publish-pattern): Package has 13,351 versions with timestamp-based version numbers, indicating a fully automated filter-list update pipeline. Rapid publishing is the normal operating mode for this package. ai
phantom-deps phantom-dep:chokidar AI (phantom-deps): CLI tool legitimately uses chokidar for file watching; declared in dependencies and referenced in config files. ai
dependencies unvetted-dep:@adguard/agtree AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
phantom-deps phantom-dep:@adguard/re2-wasm AI (phantom-deps): First-party AdGuard dependency declared in package.json; phantom-dep flag is a false positive for same-org packages. ai
phantom-deps phantom-dep:commander AI (phantom-deps): CLI tool legitimately uses commander for CLI argument parsing; declared in dependencies. ai
dependencies unvetted-dep:@adguard/logger AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
dependencies unvetted-dep:@adguard/re2-wasm AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai
dependencies unvetted-dep:@adguard/tsurlfilter AI (dependencies): First-party AdGuard dependency in the same org scope; expected internal dependency for this package. ai

Versions (showing 100 of 9618)

Version Deps Published
3.3.20260324190113 10 / 29
3.3.20260324180051 10 / 29
3.3.20260324170059 10 / 29
3.3.20260324150108 10 / 29
3.3.20260324120117 10 / 29
3.3.20260324110057 10 / 29
3.3.20260324090057 10 / 29
3.3.20260324080138 10 / 29
3.3.20260324070051 10 / 29
3.3.20260324060055 10 / 29
3.3.20260324050053 10 / 29
3.3.20260324040101 10 / 29
3.3.20260324030058 10 / 29
3.3.20260324010059 10 / 29
3.3.20260324000116 10 / 29
3.3.20260323230051 10 / 29
3.3.20260323220058 10 / 29
3.3.20260323210046 10 / 29
3.3.20260323200051 10 / 29
3.3.20260323190050 10 / 29
3.3.20260323180059 10 / 29
3.3.20260323170107 10 / 29
3.3.20260323160116 10 / 29
3.3.20260323150058 10 / 29
3.3.20260323140852 10 / 29
3.3.20260323130103 10 / 29
3.3.20260323120121 10 / 29
3.3.20260323100052 10 / 29
3.3.20260323090104 10 / 29
3.3.20260323080111 10 / 29
3.3.20260323070055 10 / 29
3.3.20260323060126 10 / 29
3.3.20260323050052 10 / 29
3.3.20260323030048 10 / 29
3.3.20260323020049 10 / 29
3.3.20260323010101 10 / 29
3.3.20260323000114 10 / 29
3.3.20260322230054 10 / 29
3.3.20260322220052 10 / 29
3.3.20260322210054 10 / 29
3.3.20260322200046 10 / 29
3.3.20260322190056 10 / 29
3.3.20260322180053 10 / 29
3.3.20260322170047 10 / 29
3.3.20260322160053 10 / 29
3.3.20260322150047 10 / 29
3.3.20260322140049 10 / 29
3.3.20260322130045 10 / 29
3.3.20260322120046 10 / 29
3.3.20260322110049 10 / 29
3.3.20260322100054 10 / 29
3.3.20260322090057 10 / 29
3.3.20260322080050 10 / 29
3.3.20260322070041 10 / 29
3.3.20260322060107 10 / 29
3.3.20260322050049 10 / 29
3.3.20260322040104 10 / 29
3.3.20260322030058 10 / 29
3.3.20260322020053 10 / 29
3.3.20260322010058 10 / 29
3.3.20260322000102 10 / 29
3.3.20260321230058 10 / 29
3.3.20260321220050 10 / 29
3.3.20260321200051 10 / 29
3.3.20260321180049 10 / 29
3.3.20260321170103 10 / 29
3.3.20260321160048 10 / 29
3.3.20260321150059 10 / 29
3.3.20260321140043 10 / 29
3.3.20260321130048 10 / 29
3.3.20260321120048 10 / 29
3.3.20260321110046 10 / 29
3.3.20260321100051 10 / 29
3.3.20260321090053 10 / 29
3.3.20260321080047 10 / 29
3.3.20260321070045 10 / 29
3.3.20260321060102 10 / 29
3.3.20260321050105 10 / 29
3.3.20260321040057 10 / 29
3.3.20260321030056 10 / 29
3.3.20260321020051 10 / 29
3.3.20260321010106 10 / 29
3.3.20260321000113 10 / 29
3.3.20260320230047 10 / 29
3.3.20260320220053 10 / 29
3.3.20260320210056 10 / 29
3.3.20260320200057 10 / 29
3.3.20260320190050 10 / 29
3.3.20260320180048 10 / 29
3.3.20260320170059 10 / 29
3.3.20260320150904 10 / 29
3.3.20260320140136 10 / 29
3.3.20260320130126 10 / 29
3.3.20260320120152 10 / 29
3.3.20260320110115 10 / 29
3.3.20260320100101 10 / 29
3.3.20260320090121 10 / 29
3.3.20260320060100 10 / 29
3.3.20260320050100 10 / 29
3.3.20260320040108 10 / 29
Showing 100 of 9618 Next page →

v3.3.20260324040101

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v3.3.20260323200051

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v3.3.20260322140049

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v3.3.20260322030058

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v3.3.20260321090053

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v3.3.20260321020051

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.