witr is a command-line and terminal user interface tool written in Go that answers a fundamental systems administration question: why is something running? The tool traces any process, port, container, or file back to the exact chain of systems and supervisors responsible for starting it, making causality explicit rather than requiring users to manually correlate outputs across multiple diagnostic tools.
The core problem witr solves is that traditional system inspection tools like ps, top, lsof, ss, systemctl, and docker ps show what is running and expose metadata about it, but they leave users to manually infer why something exists by piecing together information across different tools and layers. witr consolidates this investigation into a single command that reveals the complete startup chain, whether that chain involves supervisors, containers, services, shells, or other system components.
The tool operates in multiple modes. Users can invoke it as a command-line interface that outputs results in human-readable format or as machine-readable JSON for integration with other tools. Additionally, witr provides an interactive terminal user interface dashboard mode that allows users to explore and investigate running processes, ports, containers, and files in a visual, navigable environment. The repository includes a browser-based sandbox where users can try witr on a simulated Linux system without installation, complete with guided tutorials and free-play investigation scenarios.
witr supports a broad range of platforms and operating systems. It runs on Linux, macOS, FreeBSD, and Windows, distributed as a single static binary for each platform. The installation ecosystem is extensive, with the tool packaged across numerous package managers including Homebrew, APT, Conda, Arch Linux AUR, Winget, NPM, FreeBSD Ports, Chocolatey, Scoop, AOSC OS, GNU Guix, Uniget, Aqua, Brioche, and Mise. This wide packaging availability reflects the tool's adoption and recognition across different user communities.
The repository is classified across multiple relevant domains including CLI tools, containers, DevOps, Docker, Kubernetes, incident response, monitoring, observability, process management, system administration, systemd, terminal applications, troubleshooting, and TUI development. These classifications reflect witr's positioning as a critical tool for operators, SREs, and system administrators who need to understand system behavior during incident investigation, troubleshooting, and routine monitoring.
The tool has gained notable recognition, appearing on Trendshift as a trending repository and being featured on Product Hunt. The creator documented the motivation and development story in a Medium article, and the project generated discussion on Hacker News, indicating community interest in the problem space witr addresses. The repository maintains a homepage at pranshuparmar.github.io/witr that provides additional documentation and access to the interactive browser-based demonstration environment.
