Recently there was a discussion about this concerning a new module proposal. But it is fine to go ahead and use CGI.pm since the module is very efficient and only loads the functionality that is required by the code.