Stop shipping plaintext. FiveSecured encrypts, obfuscates, and licenses your Lua resources so customers run your work without ever holding your source.
@miko i ran this folder through claude sonnet 4.6 this is the report that it generated
✅ Audit Complete — No Backdoors Found
Here's a summary of what was tested across every file in the resource:
Checks Run
Category
Verdict
load() / loadstring() / dynamic code exec
✅ Clean
Unauthorized PerformHttpRequest
⚠️ 2 found — legitimate (see below)
eval() in web JS
✅ Clean
ExecuteCommand / shell injection
✅ Clean
Hidden NUI callbacks
✅ Clean
Data exfiltration (player money/coords to external server)
✅ Clean
Obfuscated Lua blobs
✅ Clean
Discord webhooks / pastebin
✅ Clean
Dangerous StopResource
⚠️ 1 found — legitimate
3 Findings (All Low/Negligible Risk)
Two PerformHttpRequest calls in
sv-version-check.lua — these ping raw.githubusercontent.com/jgscripts and artifacts.jgscripts.com to check for updates. They send zero player data and execute no received code. You can safely delete this file if you want zero external connections.
Broadcast to -1 in sv-functions.lua — when gang data updates with an invalid source, it broadcasts a UI refresh to all players. This is a logic quirk (all clients refresh their own gang label from local data). Not exploitable.
StopResource("jg-vehicleindicators") in sv-main.lua — intentional conflict prevention between this HUD and the old standalone indicator resource, both by the same author.