Just opening this for discussion, following https://twitter.com/ibuildthecloud/status/1303204483757875206?s=20

The pkg/locker package is a small package and, looking at git history, has low maintenance (last changes were made 3 years ago). Similar to (e.g.) the https://github.com/moby/sys and https://github.com/moby/term packages, we can consider moving the package to its own repository, to allow easier consumption of the package without having to pull in the whole docker repository and/or dealing with the CalVer versioning issues (which doesn't work well with Go modules).

/cc @ibuildthecloud @seemethere @cpuguy83 @kolyshkin