make repos card rely on vendored bridge rather than copy-pasted code