Invalidating a package

Is there a way to mark a package as invalid and block it from deployment?

Example scenario: A dangerous issue is found with a deployed package. A fix is developed and deployed as a new package with a higher version number. If this package in turn has a problem it would be natural to rollback and there the previous version, the dangerous one, can go to live.

If a package can be invalidated - preferably visibly marking it as bad and blocked when promoted/deployed - this scenario can safely avoided.