Is PBS with BBA Compare safe?
PBS with BBA Compare fetches a GitHub-hosted config on bridgebase.com and runs any JavaScript records it contains.
The extension adds bridge bidding-scenario tools to bridgebase.com. Its default configuration imports a file from the ADavidBailey/Practice-Bidding-Scenarios GitHub repository, and any 'Javascript' entries in that file or its nested imports are fetched and run with eval() inside an iframe that shares the bridgebase.com origin. The file is not pinned or signed, so its owner can change the code that runs.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
Who publishes itNo other listings under this identity
No other listings under this identity
What this publisher told the store about itself, and the other listings that told it the same thing.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Where it sends data
Destinations our analysis observed PBS with BBA Compare contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- raw.githubusercontent.comwidely used
PBS with BBA Compare sends data to raw.githubusercontent.com. A widely used service: 32 other extensions we have analysed send data here.