The risk quintuples with no lock files. And the number of maintainers is often not as important as the number of other users who are also putting eyes on the code