if you're dealing with money, you shouldn't install any dependency unless you run a security check.
you should never update a dependency unless you run a security check.
this isn't npm's fault.
you should never update a dependency unless you run a security check.
this isn't npm's fault.
Crazy idea - maybe you shouldn't be writing financial software if you're not going to audit the code that you're using