Witr

ps, lsof, ss and docker ps tell you what is running and leave the why to you, spread across several outputs you have to line up by hand. witr collapses that work into one command: point it at a process, port, container or file and it walks back through supervisors, containers, services and shells to the exact chain that started the thing. The same run can print human-readable output, emit machine-readable JSON, or open an interactive TUI.

Before installing anything you can poke at a simulated Linux box in the browser playground. It runs on Linux, macOS, Windows and FreeBSD, and arrives through brew, conda, AUR, winget, npm, ports and more. The code is Go, the license is Apache-2.0, and the repository has passed 20,000 stars on GitHub.