I'm not sure how we aren't catching this in package testing but I noticed this today.
We have a netcoreapp3.0 ref, but no rid-less netcoreapp3.0 lib. We have rid-specific libs, but if someone were to use this package on a platform that didn't map to unix|win they'd get the netstandard2.0 lib. Moreover this lib has a lower version than the netcoreapp3.0 ref, so they would see a file load exception. We should fix this by adding a netcoreapp config to match the ref.
Maybe we should see why package testing missed it too /cc @joperezr @safern