Cloudflare callouts
Good catch, thanks. Cloudflare seems to inject its DDoS/analytics stuff into any HTML page returned by the server, regardless of Content-Disposition header which seems like a bug on their end. I'm just manually stripping for now. You'll need to edit your generator to clear the download cache.
As for the others, yeah, it embeds the whole perchance engine, since it can't know in advance (in the general case, at least) whether your code will use any particular perchance engine feature at runtime (JavaScript is a very dynamic language). The v2 engine will be a lot more efficient both in terms of size and speed, but that's unfortunately not going to land any time soon.