--- title: "OSinFinance Webinar: Assessing your open source security" description: "Discover actionable strategies for managing open source dependencies and reducing vulnerabilities. Learn how to leverage Dependency Consumption Analysis, a free FINOS member benefit powered by Sonatype, to improve software security.\n\nWatch an engaging session in the Open Source in Finance Webinar Series." image: https://www.finos.org/hubfs/FINOS%20events/OSinFinance%20Webinar%20Series%20-%20Open%20Source%20in%20Finance/2025-01-22%20-%20Open%20Source%20in%20Finance%20Webinar%20Series%20-%20Sonatype-6.png --- [![FINOS](https://www.finos.org/hs-fs/hubfs/sofin%20assets/SOFIN%20LOGOS/finos-logo.png?width=543&height=126&name=finos-logo.png "FINOS")](https://finos.org) - [Projects](https://www.finos.org/projects) - [Artificial Intelligence (AI)](https://ai.finos.org/) - [Common Domain Model (CDM)](https://www.finos.org/common-domain-model) - [FDC3](https://www.finos.org/fdc3) - [Fluxnova](https://fluxnova.finos.org) - [FINOS Common Cloud Controls](https://www.finos.org/common-cloud-controls-project) - [High Performance Computing (HPC)](https://hpc.finos.org) - [OSERA](https://osera.finos.org/) - [Open Source Readiness Initiative](https://www.finos.org/open-source-readiness) - [OS-Climate](https://www.finos.org/os-climate) - [Try our Projects](https://www.finos.org/project-sandbox) - [All Projects Landscape](https://landscape.finos.org/) - [Community](https://www.finos.org/engage-with-our-community) - [FINOS Community Calendar](https://www.finos.org/calendar) - [Community Quickstart](https://www.finos.org/get-involved) - [FINOS Community Site](https://community.finos.org/) - [Contribute](https://community.finos.org/docs/governance/Software-Projects/contribution) - [Unable to Contribute?](https://www.finos.org/open-source-readiness) - [Join our Slack channel](https://finos-lf.slack.com/messages/finos-community/) - [Recognize a contributor](https://github.com/finos/community/issues/new?assignees=mcleo-d&labels=community-recognition&template=Community-Recognition.md&title=FINOS+Community+Recognition) - [Ambassador Program](https://www.finos.org/ambassador-program) - [Membership](https://www.finos.org/membership-benefits) - [Members](https://www.finos.org/members) - [Inquire](https://www.finos.org/membership-benefits#become-a-member) - [Join](https://joinnow.platform.linuxfoundation.org/?project=finos) - [Member ROI Summary & Calculator](https://www.finos.org/roi-report-calculator) - [Dependency Consumption Analysis](https://www.finos.org/dependency-consumption-analysis) - Resources - [2025 Mission & Vision](https://www.finos.org/2024-in-review-2025-vision) - [Research & Case Studies](https://www.finos.org/research-case-studies) - [Training](https://training.linuxfoundation.org/finos/) - [Open Source Maturity Model](https://osr.finos.org/docs/bok/OSMM/Introduction) - [Contributions Live Dashboard](https://metrics.finos.org) - [Our Github Organization](https://github.com/finos/) - [Our Developer Toolchain](https://odp.finos.org/) - [FINOS Store](https://store-finos.myshopify.com/) - News & Events - [This Week At FINOS](https://www.finos.org/this-week-at-finos) - [Community Blog](https://www.finos.org/blog) - [Newsletter](https://www.finos.org/newsletter) - [Podcast: Open Source in Finance](https://www.finos.org/open-source-in-finance-podcast) - [Press Releases](https://www.finos.org/press) - [FINOS Events](https://www.finos.org/hosted-events) - [Community Events](https://www.finos.org/featured-events) - [Community Spotlight](https://www.finos.org/community-spotlight) - [Stay Informed](https://www.finos.org/sign-up) - [About](https://www.finos.org/about-us) - [Stay Informed](https://www.finos.org/sign-up) - [FAQs](https://www.finos.org/faq) - [Contact Us](https://www.finos.org/contact-us) - [Governing Board](https://www.finos.org/governing-board) - [Technical Oversight Committee](https://www.finos.org/technical-oversight-committee) - [Team](https://www.finos.org/team) - [Governance](https://www.finos.org/governance) - [Code of Conduct](https://www.finos.org/code-of-conduct) - [OSFF + Videos](https://events.linuxfoundation.org/open-source-finance-forum) - [OSFF 2026](https://events.linuxfoundation.org/open-source-finance-forum/) - [OSFF NY Workshops](https://www.finos.org/osff-ny-2026-workshops) - [OSFF Toronto 2026 Videos](https://www.finos.org/osff-toronto-2026-videos) - [OSFF New York 2025 Videos](https://www.finos.org/osff-nyc-2025-videos) - [OSFF London 2026 Videos](https://www.finos.org/osff-london-2026-videos) - [apidays Paris 2025 Videos](https://www.finos.org/apidays) - [Projects](https://www.finos.org/projects) - [Artificial Intelligence (AI)](https://ai.finos.org/) - [Common Domain Model (CDM)](https://www.finos.org/common-domain-model) - [FDC3](https://www.finos.org/fdc3) - [Fluxnova](https://fluxnova.finos.org) - [FINOS Common Cloud Controls](https://www.finos.org/common-cloud-controls-project) - [High Performance Computing (HPC)](https://hpc.finos.org) - [OSERA](https://osera.finos.org/) - [Open Source Readiness Initiative](https://www.finos.org/open-source-readiness) - [OS-Climate](https://www.finos.org/os-climate) - [Try our Projects](https://www.finos.org/project-sandbox) - [All Projects Landscape](https://landscape.finos.org/) - [Community](https://www.finos.org/engage-with-our-community) - [FINOS Community Calendar](https://www.finos.org/calendar) - [Community Quickstart](https://www.finos.org/get-involved) - [FINOS Community Site](https://community.finos.org/) - [Contribute](https://community.finos.org/docs/governance/Software-Projects/contribution) - [Unable to Contribute?](https://www.finos.org/open-source-readiness) - [Join our Slack channel](https://finos-lf.slack.com/messages/finos-community/) - [Recognize a contributor](https://github.com/finos/community/issues/new?assignees=mcleo-d&labels=community-recognition&template=Community-Recognition.md&title=FINOS+Community+Recognition) - [Ambassador Program](https://www.finos.org/ambassador-program) - [Membership](https://www.finos.org/membership-benefits) - [Members](https://www.finos.org/members) - [Inquire](https://www.finos.org/membership-benefits#become-a-member) - [Join](https://joinnow.platform.linuxfoundation.org/?project=finos) - [Member ROI Summary & Calculator](https://www.finos.org/roi-report-calculator) - [Dependency Consumption Analysis](https://www.finos.org/dependency-consumption-analysis) - Resources - [2025 Mission & Vision](https://www.finos.org/2024-in-review-2025-vision) - [Research & Case Studies](https://www.finos.org/research-case-studies) - [Training](https://training.linuxfoundation.org/finos/) - [Open Source Maturity Model](https://osr.finos.org/docs/bok/OSMM/Introduction) - [Contributions Live Dashboard](https://metrics.finos.org) - [Our Github Organization](https://github.com/finos/) - [Our Developer Toolchain](https://odp.finos.org/) - [FINOS Store](https://store-finos.myshopify.com/) - News & Events - [This Week At FINOS](https://www.finos.org/this-week-at-finos) - [Community Blog](https://www.finos.org/blog) - [Newsletter](https://www.finos.org/newsletter) - [Podcast: Open Source in Finance](https://www.finos.org/open-source-in-finance-podcast) - [Press Releases](https://www.finos.org/press) - [FINOS Events](https://www.finos.org/hosted-events) - [Community Events](https://www.finos.org/featured-events) - [Community Spotlight](https://www.finos.org/community-spotlight) - [Stay Informed](https://www.finos.org/sign-up) - [About](https://www.finos.org/about-us) - [Stay Informed](https://www.finos.org/sign-up) - [FAQs](https://www.finos.org/faq) - [Contact Us](https://www.finos.org/contact-us) - [Governing Board](https://www.finos.org/governing-board) - [Technical Oversight Committee](https://www.finos.org/technical-oversight-committee) - [Team](https://www.finos.org/team) - [Governance](https://www.finos.org/governance) - [Code of Conduct](https://www.finos.org/code-of-conduct) - [OSFF + Videos](https://events.linuxfoundation.org/open-source-finance-forum) - [OSFF 2026](https://events.linuxfoundation.org/open-source-finance-forum/) - [OSFF NY Workshops](https://www.finos.org/osff-ny-2026-workshops) - [OSFF Toronto 2026 Videos](https://www.finos.org/osff-toronto-2026-videos) - [OSFF New York 2025 Videos](https://www.finos.org/osff-nyc-2025-videos) - [OSFF London 2026 Videos](https://www.finos.org/osff-london-2026-videos) - [apidays Paris 2025 Videos](https://www.finos.org/apidays) ![Community Blog](https://www.finos.org/hubfs/10.04.19.FINOS_WebsiteBanners_3.png) # Community Blog # OSinFinance Webinar: Assessing your open source security January 23, 2025 [FINOS Team](https://www.finos.org/blog/author/finos-team) Discover actionable strategies for managing open source dependencies and reducing vulnerabilities. Learn how to leverage [Dependency Consumption Analysis](https://www.finos.org/dependency-consumption-analysis), a free FINOS member benefit powered by Sonatype, to improve software security. Watch an engaging session in the Open Source in Finance Webinar Series. **Speakers:** Brian Fox, Co-Founder & CTO, Sonatype. Tosha Ellison, Strategic Advisor, FINOS. [Dependency Consumption Analysis](https://www.finos.org/dependency-consumption-analysis) This detailed discussion centers on the critical role of open source dependencies in modern software development, specifically within the financial services sector. The speakers highlight the extensive use of open source components, which constitute approximately 90% of a typical application, and address the often-overlooked magnitude of these components within organizations. Emphasizing the importance of proper management of these dependencies, they discuss the benefits such as improved software quality and business value, and the challenges including potential security vulnerabilities and compliance with regulations. The webinar also provides insights into tools and methodologies for better managing these dependencies, the significance of developer training, and the evolving landscape of software supply chain attacks. The goal is to help organizations understand their open source consumption, mitigate risks, and leverage better practices for secure and efficient software development. ## SLIDES [![2025-01-22 - OSinFinance Webinar Sonatype Slides Cover Image](https://www.finos.org/hs-fs/hubfs/FINOS%20events/OSinFinance%20Webinar%20Series%20-%20Open%20Source%20in%20Finance/2025-01-22%20-%20OSinFinance%20Webinar%20Sonatype%20Slides%20Cover%20Image.jpg?width=450&height=253&name=2025-01-22%20-%20OSinFinance%20Webinar%20Sonatype%20Slides%20Cover%20Image.jpg)](https://www.finos.org/hubfs/FINOS%20events/OSinFinance%20Webinar%20Series%20-%20Open%20Source%20in%20Finance/2025-01-22%20-%20OSinFinance%20Webinar%20FINOS%20%2B%20Sonatype/Q1%202025-FINOS%20In%20the%20Room%20with%20us.pptx%20(1).pdf) ## Chapter Time Stamps: 00:00 Introduction to Open Source Dependencies 00:24 The Prevalence of Open Source in Modern Applications 02:55 Challenges and Benefits in Financial Services 04:17 Early Adoption and Industry Trends 05:06 Security Concerns and Componentization 05:31 FINOS Report Insights 08:13 Confidence vs. Reality in Open Source Management 11:11 Dependency Consumption Analysis 11:52 Visibility and Risk Management 16:25 Case Studies and Real-World Examples 25:53 Developer Behavior and Organizational Impact 28:27 Understanding Licensing and Policy Violations 29:06 Outdated Infrastructure and Shadow Downloads 30:14 Open Source Supply Chain Attacks 31:25 The Rise of Malicious Components 33:11 Combating Malicious Components 35:47 Proactive Measures and Real-Time Data 46:54 Empowering Developers with Better Tools 52:04 Integrating Tools in Legacy Systems 54:54 Q&A and Final Thoughts   **Interested in FINOS open source projects? Click the link below to see how to get involved in the FINOS Community.** [![Get Involved](https://no-cache.hubspot.com/cta/default/2419532/89037a0a-24fa-4ef5-bbf8-34d9a45ea1d3.png)](https://cta-redirect.hubspot.com/cta/redirect/2419532/89037a0a-24fa-4ef5-bbf8-34d9a45ea1d3)   [**FINOS Good First Issues**](https://github.com/search?q=org%3Afinos+is%3Aopen+label%3A%22good+first+issue%22&unscoped_q=is%3Aopen+label%3A%22good+first+issue%22) - Looking for a place to contribute? Take a look at good first issues across FINOS projects and get your feet wet in the FINOS community. [State of Open Source in Financial Services Report 2024](https://www.finos.org/state-of-open-source-in-financial-services-2024) - Learn about what is really happening around open source in FSI. [**This Week at FINOS Blog**](https://finos.org/this-week-at-finos?utm_campaign=20210312%20Newsletter&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-9Zgn2rjI2nlAwd4d3Mf5LKC8CmqUJ1wzZYFYOTKgWIuCxaowceMq1Y0ZiFrWPAcWoelavo) - See what is happening at FINOS each week. [**FINOS Landscape**](https://landscape.finos.org/?utm_campaign=20210312%20Newsletter&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-9Zgn2rjI2nlAwd4d3Mf5LKC8CmqUJ1wzZYFYOTKgWIuCxaowceMq1Y0ZiFrWPAcWoelavo) - See our landscape of FINOS open source and open standard projects. [**Community Calendar**](https://calendar.finos.org)- Scroll through the calendar to find a meeting to join. [**FINOS Slack Channels**](https://finos.org/blog/finos-announces-new-community-slack?utm_campaign=20210428%20-%20FINOS%20All%20Community%20Call%20-%20Q2%202021&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-9Zgn2rjI2nlAwd4d3Mf5LKC8CmqUJ1wzZYFYOTKgWIuCxaowceMq1Y0ZiFrWPAcWoelavo) - The FINOS Slack provides our Community another public channel to discuss work in FINOS and open source in finance more generally. [**Project Status Dashboard**](https://metrics.finos.org/goto/7bfcb03f027a1406c997d731d4715ea7?utm_campaign=20210312%20Newsletter&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-9Zgn2rjI2nlAwd4d3Mf5LKC8CmqUJ1wzZYFYOTKgWIuCxaowceMq1Y0ZiFrWPAcWoelavo) - See a live snapshot of our community contributors and activity. [**Events**](https://finos.org/news-and-events?utm_campaign=20210312%20Newsletter&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-9Zgn2rjI2nlAwd4d3Mf5LKC8CmqUJ1wzZYFYOTKgWIuCxaowceMq1Y0ZiFrWPAcWoelavo) - Check out our upcoming events or email [**marketing@finos.org**](mailto:marketing@finos.org) if you'd like to partner with us or have an event idea. [**FINOS Open Source in Finance Podcasts**](https://anchor.fm/finos) - Listen and subscribe to the first open source in fintech and banking podcasts for deeper dives on our virtual "meetup" and other topics.   ### Share this: - [Tweet](https://twitter.com/share) [← Open Source in Finance Podcast: Unlocking Innovation - Kratix & Platform Engineering at NatWest](https://www.finos.org/blog/open-source-in-finance-podcast-unlocking-innovation-kratix-platform-engineering-at-natwest) [Exciting Updates from FINOS: New Governing Board Members, Reports, and OSFF Registration →](https://www.finos.org/blog/new-governing-board-members-reports-osff-registration) [![FINOS Logo](https://www.finos.org/hs-fs/hubfs/sofin%20assets/SOFIN%20LOGOS/FINOS_Icon_Wordmark_White.png?width=689&height=971&name=FINOS_Icon_Wordmark_White.png "FINOS Logo")](https://www.finos.org/) [![Twitter logo](https://finos.org/hubfs/2419532/FINOS/website/logos/social-logos/twitter-blue-social-panel.png)](https://twitter.com/finosfoundation) [![GitHub logo](https://finos.org/hubfs/2419532/FINOS/website/logos/social-logos/github-black-social-panel.png)](https://finos.github.io) [![LinkedIn logo](https://finos.org/hubfs/2419532/FINOS/website/logos/social-logos/linkedin-blue-social-panel.png)](https://www.linkedin.com/company/finosfoundation) [![SlideShare logo](https://finos.org/hubfs/2419532/FINOS/website/logos/social-logos/Homepage%20Social%20Panel/slideshare-logo.png)](https://www.slideshare.net/finosfoundation) [![YouTube logo](https://finos.org/hubfs/2419532/FINOS/website/logos/social-logos/Homepage%20Social%20Panel/youtube_logo-1.png)](https://www.youtube.com/channel/UCfJAdRALzJ7J7snubrb_Y-Q) [Contact Us](https://www.finos.org/contact-us) [info@finos.org](mailto:info@finos.org) +1 (650) 665-9773 [Privacy |](https://www.finos.org/privacy-policy)[Terms of Service |](https://www.finos.org/terms-of-service)[Community Code of Conduct |](https://www.finos.org/code-of-conduct)[Email Preferences](https://www.finos.org/hs/manage-preferences/unsubscribe-simple) ```json { "@context" : "https://schema.org", "@type" : "VideoObject", "contentUrl" : "https://stream.mux.com/Tu55l0001c02EEAcrDPZ1yOLfWTeI5H8Ovx2rGBhNWqa8s/capped-1080p.mp4", "dateModified" : "2025-01-27T11:32:12.144Z", "duration" : "PT56M3.904S", "height" : 982, "name" : "2025-01-22 OSinFinance Webinar", "thumbnailUrl" : "https://www.finos.org/hubfs/2025-01-22%20OSinFinance%20Webinar.mp4/medium.jpg", "uploadDate" : "2025-01-23T14:54:24.935Z", "width" : 1832 } ```