---
title: Techniques and Strategies for Mastering Software Composition Analysis
description: "Guest speaker: Jon Aldama, CTO & Co-Founder, FossID presented on \"Techniques and Strategies for Mastering Software Composition Analysis\". \n\nThis video is from a live webinar conducted for the FINOS Open Source Readiness (OSR) project. The OSR project meets bi-weekly for guest presentations, knowledge-sharing between financial industry firms solving similar issues on their road to open source readiness, and discussion of open source strategy. Take a look at upcoming FINOS events like this and join us!"
image: https://www.finos.org/hubfs/FINOS-guest-speakers-jon-aldama.png
---
[](https://finos.org)
- [Projects](https://www.finos.org/projects)
- [Artificial Intelligence (AI)](https://ai.finos.org/)
- [Common Domain Model (CDM)](https://www.finos.org/common-domain-model)
- [FDC3](https://www.finos.org/fdc3)
- [Fluxnova](https://fluxnova.finos.org)
- [FINOS Common Cloud Controls](https://www.finos.org/common-cloud-controls-project)
- [High Performance Computing (HPC)](https://hpc.finos.org)
- [OSERA](https://osera.finos.org/)
- [Open Source Readiness Initiative](https://www.finos.org/open-source-readiness)
- [OS-Climate](https://www.finos.org/os-climate)
- [Try our Projects](https://www.finos.org/project-sandbox)
- [All Projects Landscape](https://landscape.finos.org/)
- [Community](https://www.finos.org/engage-with-our-community)
- [FINOS Community Calendar](https://www.finos.org/calendar)
- [Community Quickstart](https://www.finos.org/get-involved)
- [FINOS Community Site](https://community.finos.org/)
- [Contribute](https://community.finos.org/docs/governance/Software-Projects/contribution)
- [Unable to Contribute?](https://www.finos.org/open-source-readiness)
- [Join our Slack channel](https://finos-lf.slack.com/messages/finos-community/)
- [Recognize a contributor](https://github.com/finos/community/issues/new?assignees=mcleo-d&labels=community-recognition&template=Community-Recognition.md&title=FINOS+Community+Recognition)
- [Ambassador Program](https://www.finos.org/ambassador-program)
- [Membership](https://www.finos.org/membership-benefits)
- [Members](https://www.finos.org/members)
- [Inquire](https://www.finos.org/membership-benefits#become-a-member)
- [Join](https://joinnow.platform.linuxfoundation.org/?project=finos)
- [Member ROI Summary & Calculator](https://www.finos.org/roi-report-calculator)
- [Dependency Consumption Analysis](https://www.finos.org/dependency-consumption-analysis)
- Resources
- [2025 Mission & Vision](https://www.finos.org/2024-in-review-2025-vision)
- [Research & Case Studies](https://www.finos.org/research-case-studies)
- [Training](https://training.linuxfoundation.org/finos/)
- [Open Source Maturity Model](https://osr.finos.org/docs/bok/OSMM/Introduction)
- [Contributions Live Dashboard](https://metrics.finos.org)
- [Our Github Organization](https://github.com/finos/)
- [Our Developer Toolchain](https://odp.finos.org/)
- [FINOS Store](https://store-finos.myshopify.com/)
- News & Events
- [This Week At FINOS](https://www.finos.org/this-week-at-finos)
- [Community Blog](https://www.finos.org/blog)
- [Newsletter](https://www.finos.org/newsletter)
- [Podcast: Open Source in Finance](https://www.finos.org/open-source-in-finance-podcast)
- [Press Releases](https://www.finos.org/press)
- [FINOS Events](https://www.finos.org/hosted-events)
- [Community Events](https://www.finos.org/featured-events)
- [Community Spotlight](https://www.finos.org/community-spotlight)
- [Stay Informed](https://www.finos.org/sign-up)
- [About](https://www.finos.org/about-us)
- [Stay Informed](https://www.finos.org/sign-up)
- [FAQs](https://www.finos.org/faq)
- [Contact Us](https://www.finos.org/contact-us)
- [Governing Board](https://www.finos.org/governing-board)
- [Technical Oversight Committee](https://www.finos.org/technical-oversight-committee)
- [Team](https://www.finos.org/team)
- [Governance](https://www.finos.org/governance)
- [Code of Conduct](https://www.finos.org/code-of-conduct)
- [OSFF + Videos](https://events.linuxfoundation.org/open-source-finance-forum)
- [OSFF 2026](https://events.linuxfoundation.org/open-source-finance-forum/)
- [OSFF NY Workshops](https://www.finos.org/osff-ny-2026-workshops)
- [OSFF Toronto 2026 Videos](https://www.finos.org/osff-toronto-2026-videos)
- [OSFF New York 2025 Videos](https://www.finos.org/osff-nyc-2025-videos)
- [OSFF London 2026 Videos](https://www.finos.org/osff-london-2026-videos)
- [apidays Paris 2025 Videos](https://www.finos.org/apidays)
- [Projects](https://www.finos.org/projects)
- [Artificial Intelligence (AI)](https://ai.finos.org/)
- [Common Domain Model (CDM)](https://www.finos.org/common-domain-model)
- [FDC3](https://www.finos.org/fdc3)
- [Fluxnova](https://fluxnova.finos.org)
- [FINOS Common Cloud Controls](https://www.finos.org/common-cloud-controls-project)
- [High Performance Computing (HPC)](https://hpc.finos.org)
- [OSERA](https://osera.finos.org/)
- [Open Source Readiness Initiative](https://www.finos.org/open-source-readiness)
- [OS-Climate](https://www.finos.org/os-climate)
- [Try our Projects](https://www.finos.org/project-sandbox)
- [All Projects Landscape](https://landscape.finos.org/)
- [Community](https://www.finos.org/engage-with-our-community)
- [FINOS Community Calendar](https://www.finos.org/calendar)
- [Community Quickstart](https://www.finos.org/get-involved)
- [FINOS Community Site](https://community.finos.org/)
- [Contribute](https://community.finos.org/docs/governance/Software-Projects/contribution)
- [Unable to Contribute?](https://www.finos.org/open-source-readiness)
- [Join our Slack channel](https://finos-lf.slack.com/messages/finos-community/)
- [Recognize a contributor](https://github.com/finos/community/issues/new?assignees=mcleo-d&labels=community-recognition&template=Community-Recognition.md&title=FINOS+Community+Recognition)
- [Ambassador Program](https://www.finos.org/ambassador-program)
- [Membership](https://www.finos.org/membership-benefits)
- [Members](https://www.finos.org/members)
- [Inquire](https://www.finos.org/membership-benefits#become-a-member)
- [Join](https://joinnow.platform.linuxfoundation.org/?project=finos)
- [Member ROI Summary & Calculator](https://www.finos.org/roi-report-calculator)
- [Dependency Consumption Analysis](https://www.finos.org/dependency-consumption-analysis)
- Resources
- [2025 Mission & Vision](https://www.finos.org/2024-in-review-2025-vision)
- [Research & Case Studies](https://www.finos.org/research-case-studies)
- [Training](https://training.linuxfoundation.org/finos/)
- [Open Source Maturity Model](https://osr.finos.org/docs/bok/OSMM/Introduction)
- [Contributions Live Dashboard](https://metrics.finos.org)
- [Our Github Organization](https://github.com/finos/)
- [Our Developer Toolchain](https://odp.finos.org/)
- [FINOS Store](https://store-finos.myshopify.com/)
- News & Events
- [This Week At FINOS](https://www.finos.org/this-week-at-finos)
- [Community Blog](https://www.finos.org/blog)
- [Newsletter](https://www.finos.org/newsletter)
- [Podcast: Open Source in Finance](https://www.finos.org/open-source-in-finance-podcast)
- [Press Releases](https://www.finos.org/press)
- [FINOS Events](https://www.finos.org/hosted-events)
- [Community Events](https://www.finos.org/featured-events)
- [Community Spotlight](https://www.finos.org/community-spotlight)
- [Stay Informed](https://www.finos.org/sign-up)
- [About](https://www.finos.org/about-us)
- [Stay Informed](https://www.finos.org/sign-up)
- [FAQs](https://www.finos.org/faq)
- [Contact Us](https://www.finos.org/contact-us)
- [Governing Board](https://www.finos.org/governing-board)
- [Technical Oversight Committee](https://www.finos.org/technical-oversight-committee)
- [Team](https://www.finos.org/team)
- [Governance](https://www.finos.org/governance)
- [Code of Conduct](https://www.finos.org/code-of-conduct)
- [OSFF + Videos](https://events.linuxfoundation.org/open-source-finance-forum)
- [OSFF 2026](https://events.linuxfoundation.org/open-source-finance-forum/)
- [OSFF NY Workshops](https://www.finos.org/osff-ny-2026-workshops)
- [OSFF Toronto 2026 Videos](https://www.finos.org/osff-toronto-2026-videos)
- [OSFF New York 2025 Videos](https://www.finos.org/osff-nyc-2025-videos)
- [OSFF London 2026 Videos](https://www.finos.org/osff-london-2026-videos)
- [apidays Paris 2025 Videos](https://www.finos.org/apidays)
# Community Blog
# Techniques and Strategies for Mastering Software Composition Analysis
January 14, 2021
[FINOS Team](https://www.finos.org/blog/author/finos-team)
**Guest speaker: Jon Aldama, CTO & Co-Founder, FossID** **presented on "Techniques and Strategies for Mastering Software Composition Analysis".**
This video is from a live webinar conducted for the [**FINOS Open Source Readiness (OSR) project**](https://finosfoundation.atlassian.net/wiki/spaces/OSR/overview). The OSR project meets bi-weekly for guest presentations, knowledge-sharing between financial industry firms solving similar issues on their road to open source readiness, and discussion of open source strategy. Take a look at [**upcoming FINOS events like this**](https://finos.org/hosted-events) and join us!
### JON'S Presentation
**Techniques and Strategies for Mastering Software Composition Analysis - November 10, 2020*****- Open Source Readiness (OSR) Project***
An explosive growth of Open Source Software (OSS) makes finding the correct origin and licensing information ever more complicated. In addition, engineers are not licensing experts and and need guidance and support in purposeful policies, processes, and infrastructure to maximize the OSS adoption efficiency and be in control of the code base. But how does Software Composition Analysis (SCA) tools work, and what techniques and strategies exist for scanning a codebase, their strengths and weaknesses?
This presentation gives an introduction to the complexity in OSS compliance and security, what challenges that SCA tools manufacturers attempt to solve, what decisions that need to be made in the analysis phase, and a few lessons learned as a tools and services vendor.
**Interested in this FINOS open source project, or any of our other projects? Click the link below to see how to get involved in the FINOS Community.**
**[](https://cta-redirect.hubspot.com/cta/redirect/2419532/89037a0a-24fa-4ef5-bbf8-34d9a45ea1d3)**
### Share this:
- [Tweet](https://twitter.com/share)
[← Open Source in Fintech Podcast: Dan Abramov of React Core Team Interview](https://www.finos.org/blog/open-source-in-fintech-podcast-dan-abramov-of-react-core-team-interview-jan-2021)
[James McLeod Named Top 100 OpenUK Influencers 2021 →](https://www.finos.org/blog/james-mcleod-named-top-100-openuk-influencers-2021)
[](https://www.finos.org/)
[](https://twitter.com/finosfoundation) [](https://finos.github.io) [](https://www.linkedin.com/company/finosfoundation) [](https://www.slideshare.net/finosfoundation) [](https://www.youtube.com/channel/UCfJAdRALzJ7J7snubrb_Y-Q)
[Contact Us](https://www.finos.org/contact-us)
[info@finos.org](mailto:info@finos.org)
+1 (650) 665-9773
[Privacy |](https://www.finos.org/privacy-policy)[Terms of Service |](https://www.finos.org/terms-of-service)[Community Code of Conduct |](https://www.finos.org/code-of-conduct)[Email Preferences](https://www.finos.org/hs/manage-preferences/unsubscribe-simple)
```json
{
"@context" : "https://schema.org",
"@type" : "VideoObject",
"contentUrl" : "https://2419532.fs1.hubspotusercontent-na1.net/hubfs/2419532/FINOS/2021%20Audio%20and%20Video/FINOS%20Open%20Source%20Readiness%20-%20FOSSID%20-%20NOV%2020.mp4",
"dateModified" : "2025-01-27T07:51:55.660Z",
"description" : "",
"duration" : "PT51M40.889S",
"height" : 720,
"name" : "FINOS Open Source Readiness - FOSSID - NOV 20",
"thumbnailUrl" : "https://www.finos.org/hubfs/FINOS/2021%20Audio%20and%20Video/FINOS%20Open%20Source%20Readiness%20-%20FOSSID%20-%20NOV%2020.mp4/medium.jpg",
"uploadDate" : "2021-01-14T17:33:59.422Z",
"width" : 1280
}
```