It doesn't matter if he downloaded it personally or not from the official presta. What matters is that the module can be tested and all its functionalities do their job. For production, it is dangerous, don't even think about using it because it intercepts payment data, personal data, card data...