[Catalyst] insecure deps with Module::Pluggable::Fast

[Brian Cassidy]

Daniel McBrearty wrote:
> one without a version string - but when I to "cpan C::P::C::Y:" it
> says its up to date ...
>
> that explains why it didn't even get on the one box. still not sure
> why the taint error though - guess I can remove M::P::F though, see if
> that fixes things

You're looking at the wrong thing. Look at 
Catalyst::Plugin::ConfigLoader -- not ConfigLoader::YAML. Anyway, i know 
it's got to be old, because, since August of '06, the loader formats are 
stored in Config::Any (i.e. Catalyst::Plugin::ConfigLoader::YAML no 
longer exists).

-Brian