fix: harden weighted-average rounding and support custody - #24

Click through to the see the full socket security project report page for this commit to see information about every dependency in this project.