I think that PPM is ActiveState's to maintain. And if I understand your third point, PPM installs from the repository that it is pointed at, so at a guess it would be neither CPAN or 'your' module but rather the one from the designated source. Generally speaking PPM shouldn't be a particular concern for authors, instead the maintainers of PPM should be concerned about the modules the authors have written.