Delivering open source software development best practices while enforcing security and legal compliance for the financial services industry