added CompositeVersion, to encapsulate both a derived and upstream version
Made CompositeVersion stricter, reducing mismatches between specifying upstream or derived version on the command line
forgot to commit composite_version
Added support for npmjs.org packages
added aliases (e.g pypi:foo works just like http://pypi.python.org/pypi/foo/)
0.4