
Marco Nikic developed and maintained core features for the mullvad/mullvadvpn-app, focusing on stability, security, and cross-platform reliability. Over twelve months, Marco delivered modular API integrations, enhanced VPN protocol support, and modernized the UI using Swift and SwiftUI, while also improving accessibility and dynamic type handling. He refactored networking components in Rust and C, implemented robust CI/CD pipelines with GitHub Actions, and introduced automated testing for end-to-end scenarios. His work addressed concurrency, memory management, and build automation, resulting in a maintainable codebase. Marco’s engineering consistently improved user experience, developer productivity, and the app’s adaptability across iOS, macOS, and Android.

Monthly summary for 2025-10 focusing on UI stability and readability improvements in mullvadvpn-app. A single bug fix delivered: SettingsInfoView text truncation resolved by allowing vertical expansion, improving readability across screen sizes.
Monthly summary for 2025-10 focusing on UI stability and readability improvements in mullvadvpn-app. A single bug fix delivered: SettingsInfoView text truncation resolved by allowing vertical expansion, improving readability across screen sizes.
September 2025 monthly summary for mullvadvpn-app. Focused on stability, UX improvements, and networking reliability to drive business value and reliability.
September 2025 monthly summary for mullvadvpn-app. Focused on stability, UX improvements, and networking reliability to drive business value and reliability.
August 2025 (mullvad/mullvadvpn-app) focused on stabilizing the development environment and establishing data-driven validation for the DAITA feature. Deliverables improved developer productivity, built reliable baselines for feature impact, and strengthened code quality through targeted tests and environment standardization. Key features delivered: - DAITA performance verification and packet size measurement: added test coverage to verify that DAITA increases average packet size; updated packet parsing to include packet size; added UI tests to compare packet data with and without DAITA enabled. - Xcode configuration stability and versioning fix: removed problematic Xcode project references causing crashes during quick open actions; standardized the development environment; updated to Xcode 16.4 in setup-project-toolchain and removed redundant Xcode version selection across workflows. Major bugs fixed: - Xcode crash risks from quick open references mitigated by removing problematic references; improved stability of project loading and quick navigation. - Elimination of inconsistent Xcode versioning across workflows, reducing setup variability and build failures. Overall impact and accomplishments: - Reduced developer friction through a stable, standardized Xcode environment and consistent workflows, leading to smoother onboarding and faster iteration. - Established a measurable basis for DIATA impact, enabling ongoing performance monitoring and data-driven decision making for feature optimization. Technologies/skills demonstrated: - Xcode project configuration and environment standardization; CI/workflow tuning; test automation (unit, integration, and UI tests); packet parsing and data validation; data-driven validation of feature impact.
August 2025 (mullvad/mullvadvpn-app) focused on stabilizing the development environment and establishing data-driven validation for the DAITA feature. Deliverables improved developer productivity, built reliable baselines for feature impact, and strengthened code quality through targeted tests and environment standardization. Key features delivered: - DAITA performance verification and packet size measurement: added test coverage to verify that DAITA increases average packet size; updated packet parsing to include packet size; added UI tests to compare packet data with and without DAITA enabled. - Xcode configuration stability and versioning fix: removed problematic Xcode project references causing crashes during quick open actions; standardized the development environment; updated to Xcode 16.4 in setup-project-toolchain and removed redundant Xcode version selection across workflows. Major bugs fixed: - Xcode crash risks from quick open references mitigated by removing problematic references; improved stability of project loading and quick navigation. - Elimination of inconsistent Xcode versioning across workflows, reducing setup variability and build failures. Overall impact and accomplishments: - Reduced developer friction through a stable, standardized Xcode environment and consistent workflows, leading to smoother onboarding and faster iteration. - Established a measurable basis for DIATA impact, enabling ongoing performance monitoring and data-driven decision making for feature optimization. Technologies/skills demonstrated: - Xcode project configuration and environment standardization; CI/workflow tuning; test automation (unit, integration, and UI tests); packet parsing and data validation; data-driven validation of feature impact.
June 2025 monthly summary for mullvad/mullvadvpn-app focusing on UI/UX modernization, CI/QA improvements, and API robustness. Delivered SwiftUI-based Terms of Service, dynamic type/accessibility improvements, CI stability enhancements, and API handling refactor; resulting in a more stable, maintainable app with improved business value.
June 2025 monthly summary for mullvad/mullvadvpn-app focusing on UI/UX modernization, CI/QA improvements, and API robustness. Delivered SwiftUI-based Terms of Service, dynamic type/accessibility improvements, CI stability enhancements, and API handling refactor; resulting in a more stable, maintainable app with improved business value.
May 2025 highlights for mullvad/mullvadvpn-app. The team delivered UX and reliability improvements, expanded offline capabilities, and modernized the codebase while ensuring cross-platform compatibility and security practices. Key outcomes include faster, more resilient VPN reconnection, robust API endpoint caching with offline fallback, safer memory and cancellation handling, enhanced test coverage, and ongoing macOS 12 compatibility and vulnerability management. These changes drive business value through improved user experience, greater reliability in intermittent networks, and stronger developer agility across languages (Swift, C/Rust).
May 2025 highlights for mullvad/mullvadvpn-app. The team delivered UX and reliability improvements, expanded offline capabilities, and modernized the codebase while ensuring cross-platform compatibility and security practices. Key outcomes include faster, more resilient VPN reconnection, robust API endpoint caching with offline fallback, safer memory and cancellation handling, enhanced test coverage, and ongoing macOS 12 compatibility and vulnerability management. These changes drive business value through improved user experience, greater reliability in intermittent networks, and stronger developer agility across languages (Swift, C/Rust).
April 2025: Delivered QUIC obfuscation support in the Mullvad VPN UI with a build-flag controlled path for debug builds, enabling configurable QUIC obfuscation for advanced users. This work integrates UI changes with build configuration hygiene and establishes groundwork for privacy-preserving networking features. Additionally, improved obfuscation-related UI text, enhanced test isolation for time-based UI scenarios, and stabilized obfuscation state logic to reduce flaky behavior and ensure a safe default. Cleanup of test/build conditions reduced fragility going forward.
April 2025: Delivered QUIC obfuscation support in the Mullvad VPN UI with a build-flag controlled path for debug builds, enabling configurable QUIC obfuscation for advanced users. This work integrates UI changes with build configuration hygiene and establishes groundwork for privacy-preserving networking features. Additionally, improved obfuscation-related UI text, enhanced test isolation for time-based UI scenarios, and stabilized obfuscation state logic to reduce flaky behavior and ensure a safe default. Cleanup of test/build conditions reduced fragility going forward.
March 2025 monthly summary for mullvad/mullvadvpn-app: Delivered a modular API client architecture and access method standardization by moving the API client into the mullvad-api library and standardizing access resolution. This improves cross-environment adaptability and future maintenance across platforms (including Android). Implemented Relay Prebuild Script enhancements with per-configuration caching and updated documentation to speed up builds and ensure consistent relay data. Cleaned up the Xcode build by removing embedded framework duplication and enabling MullvadREST testability, resulting in faster, more reliable tests. Also addressed Android build compatibility (rename api to access_mode) and reduced build conflicts through targeted cleanup (e.g., removing wireguard-kit duplication). Overall, these changes reduce maintenance costs, accelerate release cycles, and strengthen end-to-end testing across platforms.
March 2025 monthly summary for mullvad/mullvadvpn-app: Delivered a modular API client architecture and access method standardization by moving the API client into the mullvad-api library and standardizing access resolution. This improves cross-environment adaptability and future maintenance across platforms (including Android). Implemented Relay Prebuild Script enhancements with per-configuration caching and updated documentation to speed up builds and ensure consistent relay data. Cleaned up the Xcode build by removing embedded framework duplication and enabling MullvadREST testability, resulting in faster, more reliable tests. Also addressed Android build compatibility (rename api to access_mode) and reduced build conflicts through targeted cleanup (e.g., removing wireguard-kit duplication). Overall, these changes reduce maintenance costs, accelerate release cycles, and strengthen end-to-end testing across platforms.
February 2025: Focused on reliability and configurability improvements for mullvadvpn-app. Implemented end-to-end testing enhancements and a custom Shadowsocks port selection feature, delivering measurable improvements in network reachability reporting and test stability while enabling user-defined port mappings for WireGuard over Shadowsocks.
February 2025: Focused on reliability and configurability improvements for mullvadvpn-app. Implemented end-to-end testing enhancements and a custom Shadowsocks port selection feature, delivering measurable improvements in network reachability reporting and test stability while enabling user-defined port mappings for WireGuard over Shadowsocks.
January 2025 (2025-01) focused on delivering tangible business value through security, reliability, performance, and developer productivity improvements across mullvadvpn-app. The team implemented a more secure keychain backup policy with an atomic, migration-enabled KeychainSettingsStore, clarified VPN protocol options on iOS, and tightened the build and test pipelines to reduce risk and speed iteration. Notable work spanned UI refinements, reliability fixes, and expanded testing and tooling to support maintainability and scale.
January 2025 (2025-01) focused on delivering tangible business value through security, reliability, performance, and developer productivity improvements across mullvadvpn-app. The team implemented a more secure keychain backup policy with an atomic, migration-enabled KeychainSettingsStore, clarified VPN protocol options on iOS, and tightened the build and test pipelines to reduce risk and speed iteration. Notable work spanned UI refinements, reliability fixes, and expanded testing and tooling to support maintainability and scale.
December 2024 Monthly Summary for mullvad/mullvadvpn-app focused on stability, concurrency readiness, and build efficiency. Delivered targeted fixes and architectural groundwork to support faster delivery, stronger thread-safety, and a smoother upgrade path to newer toolchains.
December 2024 Monthly Summary for mullvad/mullvadvpn-app focused on stability, concurrency readiness, and build efficiency. Delivered targeted fixes and architectural groundwork to support faster delivery, stronger thread-safety, and a smoother upgrade path to newer toolchains.
November 2024 — Mullvad Mullvadvpn-app focused on reliability, configurability, and build quality. Notable outcomes include API connectivity improvements and test stability, expanded encrypted DNS configurability, upstream dependency updates, and CI/build hygiene enhancements. Business value includes increased reliability in API access, flexibility in DNS configuration, more robust release builds, and faster delivery cycles.
November 2024 — Mullvad Mullvadvpn-app focused on reliability, configurability, and build quality. Notable outcomes include API connectivity improvements and test stability, expanded encrypted DNS configurability, upstream dependency updates, and CI/build hygiene enhancements. Business value includes increased reliability in API access, flexibility in DNS configuration, more robust release builds, and faster delivery cycles.
During 2024-10, Mullvad VPN app delivered stability improvements, connectivity enhancements, and tooling updates across Packet Tunnel, WireGuard, Shadowsocks, documentation, and CI. Key outcomes include reliability improvements in the Packet Tunnel due to retry-enabled settings migration and keychain error handling, a connectivity boost via a new pingableGateway in WireGuard, and a new Shadowsocks obfuscation tunneling option with associated code/tests updates. In addition, dev workflow was streamlined by fixing the SwiftUI development path (SOURCE_PACKAGES_PATH) and aligning documentation to the new minimum iOS version. Finally, security/compliance was maintained by suppressing OSV scan results for rexml in trusted CI builds through 2025-05-01. These changes collectively improve user stability, faster connection setup, and developer productivity while aligning with platform requirements.
During 2024-10, Mullvad VPN app delivered stability improvements, connectivity enhancements, and tooling updates across Packet Tunnel, WireGuard, Shadowsocks, documentation, and CI. Key outcomes include reliability improvements in the Packet Tunnel due to retry-enabled settings migration and keychain error handling, a connectivity boost via a new pingableGateway in WireGuard, and a new Shadowsocks obfuscation tunneling option with associated code/tests updates. In addition, dev workflow was streamlined by fixing the SwiftUI development path (SOURCE_PACKAGES_PATH) and aligning documentation to the new minimum iOS version. Finally, security/compliance was maintained by suppressing OSV scan results for rexml in trusted CI builds through 2025-05-01. These changes collectively improve user stability, faster connection setup, and developer productivity while aligning with platform requirements.
Overview of all repositories you've contributed to across your timeline