The brute force solution that does not even touch your initial script at all: write your own CGI script using LWP to proxy requests to the real script, then have the proxy transparently run updates if necessary. It does add significant overhead, but if your traffic is really that low that's not a concern anyway. Any updates to the vendor CGI don't affect you in the least either.

Makeshifts last the longest.