Source is a URL to wherever the cookbook comes from, git, community site, chef server. Currently it's implied that anything other than a local source is a published artifact in some way, that is, it should be stored in the cache and treated as immutable (though we can add a `pristine` function down the line).