Overhaul package_sources

[richfitz]

should use the conventions used by Remotes. I think that Gabor has a package that includes ability to parse these without a big dependency.