Since the sb3 got leaked, perhaps you could add anti-decompilation measures to a future update for this mod?
(Unless you already did, of course.)
Penguinmod has hat block 'always' that always runs whenever if the project is stopped or not, and it also works in studio, there is an extension called sensing plus that lets you detect if the project is packaged
What you can do is check if the project is packaged, if not, check if the users username is YOUR username, if not run do something like create clone and as clone create clone
Though anyone can bypass it by just opening the sb3 with something like winrar and changing the project.json