fable-architecture

No evidence of intentional malware or supply-chain sabotage is present. The Compose file contains significant security weaknesses: hardcoded database and RabbitMQ credentials, use of the default guest account, exposure of internal gRPC services and RabbitMQ management to the host, and no visible TLS or secret-management controls. Secrets should be supplied through a secret manager or protected environment file, default credentials should be replaced, and non-public service and management ports should not be published.