I'm tired of wrestling with this.

We conditionally define random_bytes() and fallback to an
implementation that ALWAYS throws an Exception. However, in
libraries that consume random_compat, we want the type hint to
always be a string.

So, I'm done. Suppress the damn error (but still print it) and
let's move on with our lives.

Author: paragonie-security

lib/random.php

@@ -204,6 +204,7 @@ class_exists('COM')
          *
          * @param mixed $length
          * @psalm-suppress MissingReturnType
+         * @psalm-suppress InvalidReturnType
          * @throws Exception
          * @return string
          */

psalm.xml

@@ -14,5 +14,6 @@
         <InvalidOperand errorLevel="info" />
         <UndefinedConstant errorLevel="info" />
         <MissingReturnType errorLevel="info" />
+        <InvalidReturnType errorLevel="info" />
     </issueHandlers>
 </psalm>