Make vendored packages ES3-safe.

Fixes #5365.