Just shows how much I've been paying attention.
I've been using CGI::Lite for a number of years. It does some of the things that CGI.pm does, but not everything. CGI.pm does *waaaay* more than I ever need. I just want some forms parsed, thanks very much, not a OO thingy to generate HTML. Anyways, I just discovered that CGI::Lite has been unmaintained for more than 3 years, with an "emergency" release in February of 2002 to fix a severe security bug.
So, perhaps I need to look for something else, since I really don't want CGI.pm, unless there's a lightweight subset that one can use.
Evidentally I have not done any CGI stuff in aeons, having been doing mostly mod_perl stuff. I consider this a *good* thing.
I think that CGI.pm is effectively much lighter than it used to be. IIRC, most of it doesn't actually get loaded until used, parts have been rewritten in C (I think), and of course you can limit what gets loaded right of the bat with:
use CGI qw/ :cgi /;
You might want to consider taking another look at it.