I published a retention policy for pkgsrc packages.   It works out to “current release and last release” for what will be kept as pkgsrc binaries that you can add with pkg_radd.  If you need longer-term support, speak up, but I don’t think this will be a problem for anyone.