I’m one of the sysadmins who controls the automation utilizing the
“openstackci” account listed there. The individuals listed as
maintainers on lockfile are not current OpenStack contributors
anyway.
No OpenStack projects declare direct dependencies on lockfile since
May 2015, though it appears at least one project has a transitive
dependency on it through some other dependencies (I’m digging now to
determine which one exactly since it would be good to eliminate
that as well).