wp-docker-compose-stack

No evidence of malicious behavior or intentional supply-chain malware appears in this Docker Compose fragment. It defines a conventional local development stack. The main security concerns are exposure of unauthenticated Mailpit services, weak hardcoded development credentials, unauthenticated Redis, debug logging, and mutable container image tags. These risks are significant if the stack is reachable from an untrusted network or reused in production, but the configuration is broadly consistent with an intentionally insecure local development environment.