[COOK-2297] more gracefully handle pip packages from VCS or source archives