We currently use CGI::Application, HTML::Template, Apache::Session, and others. Strict is mandatory, as is warnings. We have a rigid QA and "post test" cleanup schedule that keeps our code as clean as possible.

Hopefully that will be sufficient for the time being.