If the package is locked, it could mean you need to require external access
to use the sources within them. I noticed they said 'org' and 'apache' - well
org can mean organisation - but I am not...