in reply to How old is too old?

Also, many Perl modules – like the one for Xerces – are simply "wrappers" for another public API implemented by the binary library that actually does the work. As long as that API remains stable, the Perl module doesn't need to be updated. Apache supplies both the binary and the Perl wrapper on its project site. You do want to make sure that the binary library version is the latest available.