We didn't properly check for no sources in a dependency, which caused a
crash for some invalid pubspecs.

Closes #1348

R=rnystrom@google.com

Review URL: https://codereview.chromium.org//1417993002 .