Saxon supports all xpath versions though? It also bundles some very dangerous functions, some of which xcat can take advantage of.