Deep technical articles, product updates, and infrastructure thinking from the Frigga engineering team. Written by engineers who manage real production systems.
On the last day of March 2026, one compromised maintainer account turned axios, one of the most widely used JavaScript libraries in the world, into a malware delivery system. The package ships…
A container image is mostly software you did not write and cannot see: base-image OS packages, transitive dependencies, and libraries pulled in three levels deep. That is fine until a critical…
Almost every incident begins with the same question: what changed? In a lot of organisations the honest answer is that nobody is quite sure, because the change was not a code deploy but a manual…
There is a well-worn rule of continuous integration: if the pipeline takes longer than ten minutes, it stops being a feedback loop and starts being an interruption. When pull-request checks run past…
For most of the last decade, the default way teams organised their code was to cut a branch, disappear into it for a week or two, and merge it back when the feature was done. That model has quietly…
Kubernetes' built-in Deployment has exactly one automated deployment strategy, the rolling update, and it is far less careful than most teams assume. It replaces old pods with new ones a few at a…
