I don't read PHP, but you're right that we're not the first to get through the API. We might be among the first to misappropriate the service for use of storing and managing arbitrary files, though.
FWIW, we did do this from scratch. I have no idea if this library has the same secret keys and stuff, but after we finished we went back and looked at other amateur audits and found the API to be basically unchanged in form between them, meaning that if they changed the API, it differed only in the specifics of the keys used, and not in say the protocol for handing server tokens and request tokens out. (I still don't know if the keys are the same between that library and our core, for example.)
While sleepycity will (mostly) function without javascript, your experience will be improved by enabling JS for this site. Only google analytics is embedded, which you're already blocking anyway if you value your privacy. Suggested firefox add-ons: Adblock edge, noscript, request policy, betterprivacy. Save money, time, CPU cycles, electricity and tell advertisers to fuck themselves.