In my package CodeFormatter I've use php fmt. What I must to do now? I can left fmt.phar as is in my package? Without violation any licenses?
The license for the fmt.phar has been referenced in the comments. My understanding is that the 3-clause BSD license referenced is permissible and non-revocable. You may want to freeze any updates to any phpfmt code you package/push.
I'm not sure how CodeFormatter delivers the phpfmt package so I can't provide additional guidance.