I agree to most of this post, but I would like to point out this passage in the README of CGI::Lite which makes me reluctant to use it in any real code:

Note from the CPAN administration: The CGI::Lite module seems to be abandoned by its original author. We cannot contact him anymore. The 2.0 release has been made on 2000-08-20. This 2.001 release is just an emergency release that fixes the most urgent security need. It is not endorsed by the original author. It was put together by me after the advisory http://msgs.securepoint.com/cgi-bin/get/bugtraq0302/94.html on the bugtraq mailing list. Thanks to Ronald F. Guilmette for bringing up this issue.

I do not and will not maintain CGI::Lite and would welcome volunteers to take it over.

2002-02-17
andreas koenig

Joost