Docker Compose depends on a bundled copy of OpenSSL that has been insecure since June: https://github.com/docker/compose/issues/1601

our production is built using docker-compose. But it is still not as easy for a developer to get started using docker-compose and be as effective as installing the code on his desktop.

I know I'm nitpicking here, but it would be great to have an abstraction on top of Dockerfiles that make it possible to develop in a near-production environment.