ncm-spma: check the locked packages with wildcards