CVEs aside, core-js is a liability on itself. Sad personal story, sad that the world still thanklessly depends on it.