Skip to main content

Recommended Scripts Modal

Recommended Scripts Modal

Read-only curated catalog with automatic compatibility tabs, search and safe browser links.

Applies to: Nord Inventory v2.0.0

Recommended Scripts security

Who can edit it?

Only Nord Lab developers editing the source before a release. There is no runtime editing path for server owners, Admin Studio administrators, or third-party developers.

Where is it stored?

The catalog is a local table inside server/core/ecosystem.lua. It is not in Config or the database.

Production protection

server/core/ecosystem.lua is intentionally not listed in escrow_ignore. When the package is published through Cfx.re/Tebex Asset Escrow, the file is protected by Asset Escrow.

The raw development/source ZIP is not Asset-Escrow encrypted. Encryption is applied by Cfx.re/Tebex during the publishing process.

Release rule

Never add server/core/ecosystem.lua to escrow_ignore.

Server owner visibility setting

Server owners cannot edit the Nord Lab curated catalog. They can only hide or show the read-only button in Admin Studio from config/core.lua:

Config.Ecosystem.ShowRecommendedScripts = true -- true = show, false = hide

When disabled, the button is hidden and the curated catalog is not included in the Admin Studio payload. The protected Nord Lab catalog itself remains unchanged inside the Asset Escrow server core.

Optional external links

Nord Lab can attach browser links to a curated recommendation. Links remain part of the protected catalog and are still read-only for server owners.

For one link, use the shorthand:

{
    name = 'Example Script',
    resource = 'example_script',
    developer = 'Example Developer',
    integration = 'Compatible',
    url = 'https://example.com/script'
}

For several destinations, use links:

links = {
    { label = 'Store', url = 'https://example.com/store' },
    { label = 'Documentation', url = 'https://example.com/docs' },
    { label = 'Discord', url = 'https://example.com/discord' }
}

The server only exposes http:// and https:// links to the NUI, removes duplicates and limits each recommendation to four external buttons. The NUI validates the URL again before asking FiveM to open it in the user's external browser.

Current UI behavior

  • tabs are created automatically from the integration values in the catalog;
  • Native, Compatible, and future values such as Bridge can appear without hard-coding a fixed tab list;
  • each tab shows its result count;
  • search matches name, resource, developer, status, integration, notes and link metadata;
  • cards show status, resource, developer and compatibility clearly;
  • all new visible labels are represented in EN/PT locales;
  • external buttons open the system browser, not an embedded untrusted webpage.

Only http:// and https:// URLs are emitted. URLs are trimmed/deduplicated, capped in length, and each catalog entry exposes at most four buttons. NUI validates the URL again before opening it.

v2.0.0 developer link registry

Current curated developers inherit shared Store/Documentation links by developer name, so the same URLs do not need to be repeated in every recommendation.

Developer Store Documentation
Nord Lab https://nord-lab.tebex.io/ https://documentation.lunarocketeer.com/books/
Renovax Scripts https://renovax-scripts.tebex.io/ https://renovax-scripts.gitbook.io/renovax-scripts-docs

Per-entry url/links remain supported and are merged through the same sanitizer. Only http/https URLs are exposed, duplicates are removed and a recommendation exposes at most four link buttons.

Back to top