I just use pyup (https://pyup.io/) for Python projects and it works like a charm. It not only show vulnerabilities but also updates and Python 3 incompatibilities.
It's not good practice. You must use Decimal when precision is important. Example: when dealing with currency, so arithmetic operations don't create or miss cents.