Is Planyway for Trello: Calendar, Timeline, Time Tracking and Reports safe?

Medium risk

Planyway exposes an authenticated request proxy that embedding pages can use to send Planyway or Trello-backed requests.

The extension injects code into Planyway's exchange page that accepts posted messages without checking the sender's origin. An embedding page can use those messages to make requests with stored Planyway or Trello authentication material and receive the responses.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

rubiusv2.7.44.3Chrome Web Store
40Risk
Who publishes it

rubius - no other listings under this identity, 1 shared hostname

What this publisher told the store about itself, and the other listings that told it the same thing.

Shared hosts - 1 hostname

Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.

docs.telerik.com
Also called by 3 other listings, including Opkey Browser Extension, Opkey Browser Extension

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Updated 2 November 2026kkgaechmpjgbojahkofamdjkaklgbdkc