add support for pinning packages

(depends-on "package" "0.0.1" :source "melpa-stable")

Is this a useful start on #252 ?