Audacity
Cross-platform open-source audio editor and recorder for multi-track recording, editing and effects processing.
I've curated this open source software catalogue since 2013, sticking to projects with active maintainers, signed releases and licences you can actually read without a solicitor — verified across Windows, macOS and Linux.
Cross-platform open-source audio editor and recorder for multi-track recording, editing and effects processing.
thorough ebook management suite that converts between 20+ formats including EPUB, MOBI, PDF and maintains metadata libraries.
Universal database management tool supporting MySQL, PostgreSQL, Oracle, SQLite and dozens of other database systems.
Mozilla's Firefox 135.0.1 download delivers enhanced privacy protection with improved tracking blocking and simplified tab management.
Professional bitmap image editor offering advanced photo manipulation and graphic design tools for Windows users.
Visual Git client with virtual branch support for managing multiple concurrent development workflows on Windows systems.
Complete open-source office suite with Writer, Calc, Impress, and Draw for document editing and presentations.
Open-source email client supporting IMAP, SMTP, POP3 protocols with tabbed interface and advanced filtering capabilities.
Visual database design tool for creating, modeling, and administering MySQL databases with ER diagram generation capabilities.
Open-source transport simulation game recreating Transport Tycoon Deluxe with modern multiplayer support and enhanced graphics.
Portable PDF split and merge utility that handles document restructuring without requiring installation on Windows systems.
Multi-platform frontend for retro gaming emulators that runs classic console and arcade games through unified interface.
Cross-platform Git client featuring visual commit graphs, branch management, and integrated SSH support for repository workflows.
Cross-platform open-source media player supporting hundreds of audio and video formats with streaming capabilities.
I've been reviewing PC software since 2013, and the phrase "open source software" still gets misused weekly in vendor press releases. It has a specific meaning: source code published under a licence approved by the OSI, with the right to read, modify and redistribute it. That's it. Price isn't part of the definition, which trips up readers who conflate it with our free software listings or our freemium catalogue.
Freeware costs nothing but hides its internals — fine for utilities, hopeless for anything touching your credentials. Source-available projects (BUSL, SSPL, Elastic Licence) publish code but restrict commercial reuse; useful, not technically open source. True FOSS lets a competitor fork the project tomorrow, which is exactly why it tends to outlive its corporate sponsors.
The Free Software Foundation prefers "libre" to stress freedom over price. In practice, "open source software" and "free software" describe the same code; the argument is philosophical. I use both terms interchangeably and so does most of the industry, Stallman's protests notwithstanding.
The licence determines what you can do with the code, and more importantly what downstream developers can do. Get this wrong in a commercial project and you'll find out via a solicitor's letter.
GPLv2 and GPLv3 are viral. If you ship a binary built on GPL code, you must ship the source under the same terms. Multimedia tools like VLC (LGPL/GPL) and Audacity sit here, as does the Linux kernel itself. Copyleft is why we still have a functioning open source ecosystem — it stops vendors from quietly enclosing the commons.
MIT is twenty lines long and lets anyone do almost anything, including closing the source in a derivative product. Apache 2.0 adds patent grants, which matters for corporate adoption. Most modern developer tooling ships under one of these — React, Kubernetes, VS Code's open core. Permissive licences win on adoption; copyleft wins on long-term freedom.
The standard pitch is that open source software is more secure because anyone can audit it. I've repeated this line for years and I'm now less certain. In March 2024, a maintainer called "Jia Tan" spent two years gaining trust on the xz-utils project before slipping in an SSH backdoor that nearly reached every Debian and Red Hat server on the planet. It was caught by accident, by one Microsoft engineer noticing a 500ms login delay.
Open source isn't automatically more secure — it's more auditable. That distinction matters. Security tools like KeePassXC and Bitwarden benefit because cryptographers can and do read the code. Random GitHub releases from a single maintainer with no review process benefit far less.
I check three things: signed releases (GPG or Sigstore), more than one active maintainer in the last twelve months, and reproducible builds where the project claims them. If a download only exists as a binary on a personal Dropbox, it doesn't get listed. Our editorial methodology spells out the rest.
FOSS started on Unix and it shows. Linux gets first-class treatment; everything else is a port of varying quality.
On Linux, your package manager already has most of what you need. On Windows, you're pulling MSIs from GitHub releases or using winget. On Mac, Homebrew handles 90% of the catalogue; the rest comes as unsigned DMGs that macOS will refuse to open until you right-click. Flatpak has made cross-distro Linux distribution sane for the first time in a decade.
The shortlist I actually run: LibreOffice on the work box (office productivity done properly, no Copilot nagware), KeePassXC for credentials, qBittorrent because the original uTorrent went to seed years ago, OBS Studio for screen capture, Inkscape and GIMP for graphics, Blender for 3D, Firefox as the daily browser, and Thunderbird for email. For games and entertainment, RetroArch and 0 A.D. earn their place. Bitwarden sits in the awkward middle — open source core with a paid org tier, which we treat as freemium with an OSS heart.
Almost always, yes. The licence guarantees the freedom to use and redistribute, which makes charging for the binary impractical when someone else can mirror it for nothing. Paid support contracts (Red Hat, GitLab) are the usual business model, not paid downloads.
GPL is copyleft: derivatives must stay open source under the same terms. MIT is permissive: derivatives can be closed-source commercial products. GPL protects the code's openness; MIT prioritises adoption. Apache 2.0 sits near MIT but adds explicit patent grants.
It's more auditable, which is not the same thing. The xz-utils backdoor in 2024 showed that "many eyes" only works when people actually look. Well-funded projects like Firefox or the Linux kernel get genuine scrutiny; a one-maintainer GitHub project does not.
Yes, with conditions. MIT and Apache 2.0 let you ship commercial products without releasing your source. GPL requires you to publish any modifications you distribute. AGPL extends that requirement to network-delivered software. Read the licence before shipping.
The official project site or its GitHub releases page. Verify the GPG signature where the project publishes one. Avoid third-party download portals that wrap FOSS installers in adware — they're the reason this catalogue exists.
Not automatically. Firefox and VS Code both ship telemetry by default; the difference is you can read the code, see exactly what's collected, and disable it. Closed-source telemetry is a black box. Open source telemetry is at least negotiable.
Three rules: signed releases, more than one active maintainer in the last year, and a track record we can verify. Our full criteria sit in how we rate, written by the same reviewer who has run this catalogue since 2013.