SOOS has a customizable Governance function to allow you to set specific policies to be used as criteria to check the open source code during each scan.

Package policies allow you to define a customized list of package IDs and versions (optional) to flag as violations if they are detected.