diff --git a/config/Migrations/20261113120000_AddPackageNamespace.php b/config/Migrations/20261113120000_AddPackageNamespace.php
new file mode 100644
index 00000000..a527f19b
--- /dev/null
+++ b/config/Migrations/20261113120000_AddPackageNamespace.php
@@ -0,0 +1,41 @@
+<?php
+declare(strict_types=1);
+
+use Migrations\BaseMigration;
+
+class AddPackageNamespace extends BaseMigration
+{
+    /**
+     * Backfill the Composer vendor before requiring it on future inserts.
+     */
+    public function up(): void
+    {
+        $this->table('packages')
+            ->addColumn('namespace', 'string', [
+                'limit' => 255,
+                'null' => true,
+            ])
+            ->update();
+
+        $this->execute("UPDATE packages SET namespace = LOWER(SUBSTR(package, 1, INSTR(package, '/') - 1))");
+
+        $this->table('packages')
+            ->changeColumn('namespace', 'string', [
+                'limit' => 255,
+                'null' => false,
+            ])
+            ->addIndex(['namespace'])
+            ->update();
+    }
+
+    /**
+     * The full Composer name remains available after rollback.
+     */
+    public function down(): void
+    {
+        $this->table('packages')
+            ->removeIndex(['namespace'])
+            ->removeColumn('namespace')
+            ->update();
+    }
+}
diff --git a/config/Migrations/20261113160000_AddMonthlyPackageDownloads.php b/config/Migrations/20261113160000_AddMonthlyPackageDownloads.php
new file mode 100644
index 00000000..293442da
--- /dev/null
+++ b/config/Migrations/20261113160000_AddMonthlyPackageDownloads.php
@@ -0,0 +1,20 @@
+<?php
+declare(strict_types=1);
+
+use Migrations\BaseMigration;
+
+class AddMonthlyPackageDownloads extends BaseMigration
+{
+    /**
+     * Unknown counts remain distinct from packages with zero monthly downloads.
+     */
+    public function change(): void
+    {
+        $this->table('packages')
+            ->addColumn('monthly_downloads', 'integer', [
+                'null' => true,
+                'default' => null,
+            ])
+            ->update();
+    }
+}
diff --git a/config/Migrations/schema-dump-default.lock b/config/Migrations/schema-dump-default.lock
index 16238958..320af07a 100644
Binary files a/config/Migrations/schema-dump-default.lock and b/config/Migrations/schema-dump-default.lock differ
diff --git a/config/app.php b/config/app.php
index 29a1d6f6..dd9b52ee 100644
--- a/config/app.php
+++ b/config/app.php
@@ -108,6 +108,7 @@
     'GitHub' => [
         'applicationId' => env('AUTH_ID_GITHUB'),
         'applicationSecret' => env('AUTH_SECRET_GITHUB'),
+        'apiToken' => env('GITHUB_API_TOKEN'),
     ],
 
     'Packages' => [
@@ -157,6 +158,14 @@
             'url' => env('CACHE_DEFAULT_URL'),
         ],
 
+        'github_profiles' => [
+            'className' => FileEngine::class,
+            'path' => CACHE . 'github_profiles' . DS,
+            'prefix' => 'plugins_github_profiles_',
+            'duration' => '+1 day',
+            'url' => env('CACHE_GITHUB_PROFILES_URL'),
+        ],
+
         'rate_limit' => [
             'className' => FileEngine::class,
             'path' => CACHE . 'rate_limit' . DS,
diff --git a/config/routes.php b/config/routes.php
index 996e4414..48b40ca8 100644
--- a/config/routes.php
+++ b/config/routes.php
@@ -58,9 +58,34 @@
          * its action called 'display', and we pass a param to select the view file
          * to use (in this case, templates/Pages/home.php)...
          */
-        $builder->connect('/', ['controller' => 'Packages', 'action' => 'index']);
-        $builder->get('/plugins/{id}', ['controller' => 'Packages', 'action' => 'view'], 'plugin:view')
-            ->setPatterns(['id' => '[0-9]+'])->setPass(['id']);
+        $builder->connect('/', [
+            'controller' => 'Packages',
+            'action' => 'index',
+        ], ['_name' => 'plugin:index']);
+        $builder->get('/publishers', [
+            'controller' => 'Publishers',
+            'action' => 'index',
+        ], 'publisher:index');
+        $packageSegment = '[A-Za-z0-9][A-Za-z0-9_.-]*';
+        $builder->get('/plugins/{namespace}/{name}', [
+            'controller' => 'Packages',
+            'action' => 'view',
+        ], 'plugin:view')
+            ->setPatterns([
+                'namespace' => $packageSegment,
+                'name' => $packageSegment,
+            ])
+            ->setPass(['namespace', 'name'])
+            ->setExtensions([]);
+        $builder->get('/plugins/{namespace}', [
+            'controller' => 'Packages',
+            'action' => 'byNamespace',
+        ], 'plugin:namespace')
+            ->setPatterns([
+                'namespace' => $packageSegment,
+            ])
+            ->setPass(['namespace'])
+            ->setExtensions([]);
         $builder->connect('/requirements', ['controller' => 'Pages', 'action' => 'display', 'requirements']);
 
         /*
diff --git a/playwright.config.js b/playwright.config.js
index ab7fdb2e..d77fce92 100644
--- a/playwright.config.js
+++ b/playwright.config.js
@@ -17,6 +17,7 @@ export default defineConfig({
             DEBUG: 'false',
             RATE_LIMIT_ENABLED: 'false',
             CACHE_DEFAULT_URL: 'array://',
+            CACHE_GITHUB_PROFILES_URL: `file://${fileURLToPath(new URL('./tmp/browser-github-profiles/', import.meta.url))}`,
             CACHE_MODEL_URL: 'array://',
             CACHE_PERSISTENT_URL: 'array://',
         },
diff --git a/resources/css/style.css b/resources/css/style.css
index 582d73e6..1eaf2064 100644
--- a/resources/css/style.css
+++ b/resources/css/style.css
@@ -174,9 +174,106 @@ body::before {
     & h1 { @apply mb-2 text-[clamp(1.875rem,3.5vw,2.5rem)] leading-tight font-bold tracking-[-0.025em]; }
     & p { @apply text-muted; }
 }
+.namespace-hero {
+    @apply relative isolate overflow-hidden border-b border-base-300 bg-base-100;
+    --namespace-rose: color-mix(in srgb, var(--color-primary) 28%, transparent);
+    &::before, &::after {
+        content: "";
+        position: absolute;
+        z-index: -1;
+        pointer-events: none;
+    }
+    &::before {
+        inset: -45%;
+        background:
+            radial-gradient(ellipse at 15% 45%, var(--namespace-rose), transparent 50%),
+            radial-gradient(ellipse at 75% 35%, var(--glow-violet), transparent 50%),
+            radial-gradient(ellipse at 60% 80%, var(--glow-amber), transparent 45%);
+        animation: namespace-gradient 22s ease-in-out infinite alternate;
+    }
+    &::after {
+        inset: -60%;
+        background: radial-gradient(ellipse at 60% 50%, var(--glow-violet), transparent 58%);
+        animation: namespace-light 30s ease-in-out infinite alternate;
+    }
+}
+[data-theme="cakephp"] .namespace-hero {
+    --namespace-rose: color-mix(in srgb, var(--color-cake-red) 46%, transparent);
+    --glow-violet: #7d85dd66;
+    --glow-amber: #ffb98166;
+    background-color: var(--color-base-200);
+}
+.namespace-profile {
+    @apply grid min-w-0 items-center gap-8 pt-24 pb-12 md:gap-10 lg:min-h-72 lg:grid-cols-[minmax(0,1fr)_auto]
+        lg:gap-16 lg:py-20;
+}
+.namespace-toolbar {
+    @apply absolute inset-x-0 top-3 flex items-center justify-between gap-3 md:top-4;
+}
+.namespace-title {
+    @apply text-[clamp(1.75rem,5vw,4rem)] leading-none font-bold tracking-[-0.055em] wrap-anywhere;
+}
+.namespace-avatar {
+    @apply relative size-14 overflow-hidden rounded-xl bg-primary/10 text-lg font-semibold text-primary
+        md:size-24 md:rounded-2xl md:text-2xl;
+    & img { @apply absolute inset-0 size-full object-cover; }
+}
+.namespace-identity {
+    @apply flex min-w-0 items-center gap-4 md:gap-5;
+    min-height: max(6rem, calc(clamp(1.75rem, 5vw, 4rem) + 3.25rem));
+}
+.namespace-description {
+    @apply mt-3 line-clamp-2 max-w-[42ch] text-sm leading-5 text-muted;
+}
+.namespace-profile-links {
+    @apply mt-2 ml-18 flex gap-1 md:ml-29;
+}
+.namespace-profile-link {
+    @apply size-8 min-h-8 border-0 bg-transparent p-0 text-muted shadow-none hover:bg-base-100/40 hover:text-primary;
+    & svg { @apply size-4.5; }
+}
+@media (pointer: coarse) {
+    .namespace-profile-link { @apply size-11 min-h-11; }
+}
+.namespace-statistics {
+    @apply w-full min-w-0 md:max-w-lg lg:w-[30rem];
+}
+.namespace-stat-value {
+    @apply text-[clamp(1.5rem,2.8vw,2.5rem)] leading-tight font-semibold tracking-tight tabular-nums;
+}
+@keyframes namespace-gradient {
+    from { transform: translate3d(-4%, -3%, 0) rotate(-6deg) scale(1); }
+    to { transform: translate3d(5%, 4%, 0) rotate(7deg) scale(1.12); }
+}
+@keyframes namespace-light {
+    from { transform: translate3d(4%, 0, 0) rotate(-15deg); }
+    to { transform: translate3d(-4%, 3%, 0) rotate(20deg); }
+}
 .catalogue-discovery {
     @apply mb-6 rounded-2xl border border-base-300 bg-base-100 p-4 md:p-5;
 }
+.publisher-controls {
+    @apply mb-5 flex flex-col gap-3 rounded-2xl border border-base-300 bg-base-100 p-4 md:flex-row md:items-center md:p-5;
+}
+.publisher-row {
+    @apply grid grid-cols-1 items-center gap-4 border-b border-base-300 p-4
+        hover:bg-row-hover/40 md:grid-cols-[minmax(0,1fr)_19rem] md:p-5;
+}
+.publisher-rank {
+    @apply absolute -right-2 -bottom-1 z-10 min-h-6 min-w-7 rounded-full border-2 border-base-100
+        bg-base-content px-1.5 text-xs leading-none font-semibold text-base-100 tabular-nums;
+}
+.publisher-avatar {
+    @apply relative size-14 overflow-hidden rounded-xl bg-primary/10 text-lg font-semibold text-primary md:size-16;
+    & img { @apply absolute inset-0 size-full object-cover; }
+}
+.publisher-name {
+    @apply text-lg leading-tight font-semibold wrap-anywhere;
+    & a { @apply text-base-content hover:text-primary; }
+}
+.publisher-plugin { @apply h-auto max-w-full px-2 py-1 text-xs whitespace-normal text-muted wrap-anywhere hover:text-primary; }
+.publisher-statistics { @apply grid grid-cols-3 gap-x-4 md:gap-x-6; }
+.publisher-statistics > div { @apply row-span-2 grid grid-rows-subgrid; }
 .reset-filters {
     @apply inline-flex min-h-10 shrink-0 items-center justify-center gap-1.5 text-[0.8125rem] font-medium
         whitespace-nowrap max-md:w-10;
@@ -466,7 +563,9 @@ body::before {
 @keyframes page-loading { from { transform: translateX(-100%); } to { transform: translateX(300%); } }
 @media (prefers-reduced-motion: reduce) {
     .page-loading-bar, .loading { animation: none; }
+    .namespace-hero::before, .namespace-hero::after { animation: none; }
 }
 @media (forced-colors: active) {
     body::before { display: none; }
+    .namespace-hero::before, .namespace-hero::after { display: none; }
 }
diff --git a/resources/js/app.js b/resources/js/app.js
index a13096fa..68112598 100644
--- a/resources/js/app.js
+++ b/resources/js/app.js
@@ -18,6 +18,38 @@ const register = (Alpine) => {
         },
     })
 
+    Alpine.data('namespaceCounters', () => ({
+        frame: null,
+        init() {
+            const motion = window.matchMedia('(prefers-reduced-motion: reduce)')
+            if (motion.matches) return
+            const counters = Array.from(this.$el.querySelectorAll('[data-count-up-value]'), (element, index) => ({
+                element,
+                total: Number(element.dataset.countUpValue),
+                final: element.textContent.trim(),
+                delay: index * 200,
+            }))
+            const formatter = new Intl.NumberFormat('en', { notation: 'compact', maximumFractionDigits: 1 })
+            const started = performance.now()
+            const tick = now => {
+                let complete = true
+                for (const counter of counters) {
+                    const progress = motion.matches ? 1 : Math.max(0, Math.min((now - started - counter.delay) / 1100, 1))
+                    const eased = 1 - (1 - progress) ** 3
+                    counter.element.textContent = progress === 1
+                        ? counter.final
+                        : formatter.format(Math.round(counter.total * eased)).replace('K', 'k')
+                    complete &&= progress === 1
+                }
+                this.frame = complete ? null : requestAnimationFrame(tick)
+            }
+            this.frame = requestAnimationFrame(tick)
+        },
+        destroy() {
+            if (this.frame !== null) cancelAnimationFrame(this.frame)
+        },
+    }))
+
     Alpine.data('catalogue', () => ({
         categorySearch: '',
         categoriesToggled(event) {
diff --git a/src/Application.php b/src/Application.php
index 103a7f8a..80250c6b 100644
--- a/src/Application.php
+++ b/src/Application.php
@@ -17,16 +17,13 @@
 namespace App;
 
 use ADmad\SocialAuth\Middleware\SocialAuthMiddleware;
-use App\Command\SyncPackagesCommand;
 use App\Event\AfterGithubIdentify;
 use App\Http\RateLimit\AtomicFixedWindowRateLimiter;
 use App\Middleware\ThemeCookieMiddleware;
 use App\Model\Table\PackagesTable;
 use App\Model\Table\UsersTable;
 use App\Policy\RequestPolicy;
-use App\Service\AwesomeListImporter;
-use App\Service\AwesomeListParser;
-use App\Service\PackagistImporter;
+use App\Service\GithubApiService;
 use Authentication\AuthenticationService;
 use Authentication\AuthenticationServiceInterface;
 use Authentication\AuthenticationServiceProviderInterface;
@@ -43,7 +40,6 @@
 use Cake\Datasource\FactoryLocator;
 use Cake\Datasource\RepositoryInterface;
 use Cake\Error\Middleware\ErrorHandlerMiddleware;
-use Cake\Event\EventManager;
 use Cake\Http\BaseApplication;
 use Cake\Http\Client;
 use Cake\Http\Client\ClientEvent;
@@ -55,6 +51,7 @@
 use Cake\ORM\Locator\TableLocator;
 use Cake\Routing\Middleware\AssetMiddleware;
 use Cake\Routing\Middleware\RoutingMiddleware;
+use League\Container\ReflectionContainer;
 use Packagist\Api\Client as PackagistClient;
 use Psr\Http\Message\ServerRequestInterface;
 use SocialConnect\OAuth2\Provider\GitHub;
@@ -83,8 +80,16 @@ public function bootstrap(): void
                 new TableLocator()->allowFallbackClass(false),
             );
         }
+    }
 
-        EventManager::instance()->on(new AfterGithubIdentify());
+    /**
+     * Resolve authentication event listeners through CakePHP's container.
+     *
+     * @return list<class-string<\Cake\Event\EventListenerInterface>>
+     */
+    public function eventListeners(): array
+    {
+        return [AfterGithubIdentify::class];
     }
 
     /**
@@ -203,7 +208,7 @@ public function middleware(MiddlewareQueue $middlewareQueue): MiddlewareQueue
                         }
 
                         return !in_array($request->getMethod(), ['GET', 'HEAD'], true)
-                            || !($path === '' || $path === '/packages' || preg_match('#^/plugins/[0-9]+$#', $path));
+                            || !in_array($path, ['', '/packages', '/publishers'], true) && !preg_match('#^/plugins/[A-Za-z0-9][A-Za-z0-9_.-]*(?:/[A-Za-z0-9][A-Za-z0-9_.-]*)?$#', $path);
                     },
                 ]),
             );
@@ -221,9 +226,14 @@ public function middleware(MiddlewareQueue $middlewareQueue): MiddlewareQueue
      */
     public function services(ContainerInterface $container): void
     {
+        // Interact constructs fresh island roots separately from cached service dependencies.
+        $container->delegate(new ReflectionContainer(cacheResolutions: !Configure::read('debug')));
         $container->addShared(PackagesTable::class, static fn(): RepositoryInterface => FactoryLocator::get('Table')->get(PackagesTable::class));
         $container->addShared(Client::class);
-        $container->addShared(AwesomeListParser::class);
+        $container->addShared(GithubApiService::class)->addArguments([
+            Client::class,
+            (string)Configure::read('GitHub.apiToken', ''),
+        ]);
         $container->addShared('packagist.http', static function (): Client {
             $client = new Client();
             $userAgent = (string)env('PACKAGIST_USER_AGENT', 'plugins.cakephp.org (https://plugins.cakephp.org; mailto=security@cakephp.org)');
@@ -235,9 +245,6 @@ public function services(ContainerInterface $container): void
             return $client;
         });
         $container->addShared(PackagistClient::class)->addArgument('packagist.http');
-        $container->addShared(PackagistImporter::class)->addArguments([PackagesTable::class, PackagistClient::class]);
-        $container->addShared(AwesomeListImporter::class)->addArguments([PackagesTable::class, Client::class, AwesomeListParser::class]);
-        $container->add(SyncPackagesCommand::class)->addArguments([PackagistImporter::class, AwesomeListImporter::class]);
     }
 
     /**
diff --git a/src/Controller/PackagesController.php b/src/Controller/PackagesController.php
index aa0cd245..3faffea3 100644
--- a/src/Controller/PackagesController.php
+++ b/src/Controller/PackagesController.php
@@ -4,6 +4,8 @@
 namespace App\Controller;
 
 use App\Model\Table\PackagesTable;
+use Cake\Http\Exception\NotFoundException;
+use Cake\Http\Response;
 
 /**
  * Hosts the public catalogue; islands own subsequent interactions.
@@ -16,7 +18,7 @@ class PackagesController extends AppController
     public function initialize(): void
     {
         parent::initialize();
-        $this->Authentication->allowUnauthenticated(['index', 'view']);
+        $this->Authentication->allowUnauthenticated(['index', 'view', 'byNamespace']);
     }
 
     /**
@@ -26,12 +28,45 @@ public function index(): void
     {
     }
 
+    /**
+     * Host a scoped catalogue with totals that do not change while filtering.
+     */
+    public function byNamespace(string $namespace): ?Response
+    {
+        $canonicalNamespace = strtolower($namespace);
+        $packages = $this->fetchTable(PackagesTable::class);
+        $stats = $packages->namespaceStats($canonicalNamespace);
+        if ($stats['plugins'] === 0) {
+            throw new NotFoundException('Namespace not found.');
+        }
+        if ($namespace !== $canonicalNamespace) {
+            return $this->redirect([
+                '_name' => 'plugin:namespace',
+                'namespace' => $canonicalNamespace,
+                '?' => $this->getRequest()->getQueryParams(),
+            ], 301);
+        }
+        $githubUrl = $packages->namespaceGithubUrl($namespace);
+        $backUrl = $this->getRequest()->referer();
+        if ($backUrl === null || parse_url($backUrl, PHP_URL_PATH) === $this->getRequest()->getPath()) {
+            $backUrl = ['_name' => 'plugin:index'];
+        }
+        $this->set(compact('namespace', 'stats', 'githubUrl', 'backUrl'));
+
+        return null;
+    }
+
     /**
      * Provide a normal detail URL for direct links and browsers without JavaScript.
      */
-    public function view(string $id): void
+    public function view(string $namespace, string $name): void
     {
-        $package = $this->fetchTable(PackagesTable::class)->get($id, contain: ['Tags', 'Categories']);
+        $package = $this->fetchTable(PackagesTable::class)->find()
+            ->where([
+                'Packages.package' => strtolower($namespace . '/' . $name),
+            ])
+            ->contain(['Tags', 'Categories'])
+            ->firstOrFail();
         $this->set(compact('package'));
     }
 }
diff --git a/src/Controller/PublishersController.php b/src/Controller/PublishersController.php
new file mode 100644
index 00000000..fb3424cc
--- /dev/null
+++ b/src/Controller/PublishersController.php
@@ -0,0 +1,27 @@
+<?php
+declare(strict_types=1);
+
+namespace App\Controller;
+
+/**
+ * Hosts the public publisher directory.
+ */
+class PublishersController extends AppController
+{
+    /**
+     * Publisher statistics are public catalogue information.
+     */
+    public function initialize(): void
+    {
+        parent::initialize();
+        $this->Search->setConfig('actions', [], false);
+        $this->Authentication->allowUnauthenticated(['index']);
+    }
+
+    /**
+     * Render the directory island in the shared application layout.
+     */
+    public function index(): void
+    {
+    }
+}
diff --git a/src/Event/AfterGithubIdentify.php b/src/Event/AfterGithubIdentify.php
index 6a45add5..0bfb9272 100644
--- a/src/Event/AfterGithubIdentify.php
+++ b/src/Event/AfterGithubIdentify.php
@@ -6,15 +6,23 @@
 use ADmad\SocialAuth\Middleware\SocialAuthMiddleware;
 use App\Model\Entity\User;
 use App\Model\Enum\UserRole;
+use App\Model\Table\UsersTable;
+use App\Service\GithubApiService;
 use Cake\Event\EventInterface;
 use Cake\Event\EventListenerInterface;
-use Cake\Http\Client;
 use Cake\ORM\Locator\LocatorAwareTrait;
 
 class AfterGithubIdentify implements EventListenerInterface
 {
     use LocatorAwareTrait;
 
+    /**
+     * Resolve the shared GitHub client through the application container.
+     */
+    public function __construct(private readonly GithubApiService $github)
+    {
+    }
+
     /**
      * Returns a list of events this object is interested in.
      *
@@ -41,22 +49,14 @@ public function afterIdentify(EventInterface $event, User $user): void
             return;
         }
 
-        $http = new Client([
-            'headers' => [
-                'Authorization' => 'Bearer ' . $token,
-                'Accept' => 'application/vnd.github+json',
-                'User-Agent' => 'plugins.cakephp.org',
-            ],
-        ]);
-
-        $response = $http->get('https://api.github.com/user/memberships/orgs/cakephp');
+        $response = $this->github->get('/user/memberships/orgs/cakephp', token: $token);
         if (!$response->isOk() && $response->getStatusCode() !== 404) {
             return;
         }
 
         $isCakePHPDev = $response->isOk() && ($response->getJson()['state'] ?? null) === 'active';
 
-        $usersTable = $this->getTableLocator()->get('Users');
+        $usersTable = $this->fetchTable(UsersTable::class);
         // Organization membership is authoritative, even for the last administrator.
         $user->set('is_cakephp_dev', $isCakePHPDev);
         $user->set('role', $isCakePHPDev ? UserRole::Admin : UserRole::User);
diff --git a/src/Island/CatalogueIsland.php b/src/Island/CatalogueIsland.php
index 77910955..56140268 100644
--- a/src/Island/CatalogueIsland.php
+++ b/src/Island/CatalogueIsland.php
@@ -7,6 +7,7 @@
 use Cake\Http\Exception\BadRequestException;
 use Interact\Attribute\Action;
 use Interact\Attribute\Pagination;
+use Interact\Attribute\Prop;
 use Interact\Attribute\State;
 use Interact\Island;
 use Interact\Pagination\PaginationState;
@@ -18,6 +19,9 @@
  */
 class CatalogueIsland extends Island
 {
+    #[Prop]
+    public ?string $namespace = null;
+
     #[State(writable: true, url: true)]
     public string $search = '';
 
@@ -148,7 +152,7 @@ public function viewData(): array
             throw new BadRequestException('Search query is too long.');
         }
         $options = $this->packages->filterOptions();
-        $categoryOptions = $this->packages->categoryOptions();
+        $categoryOptions = $this->packages->categoryOptions($this->namespace);
         if (!array_key_exists($this->category, $categoryOptions)) {
             $this->category = '';
         }
@@ -164,8 +168,8 @@ public function viewData(): array
             'direction' => $this->paging->direction,
         ];
         $hasFilters = trim($this->search) !== '' || $this->cakephpSlugs !== [] || $this->phpSlugs !== [] || $this->category !== '' || $this->awesomeOnly;
-        $showFeatured = !$hasFilters && $this->paging->page === 1;
-        $packages = $this->paginate($this->packages->find('catalogue', filters: $query));
+        $showFeatured = $this->namespace === null && !$hasFilters && $this->paging->page === 1;
+        $packages = $this->paginate($this->packages->find('catalogue', filters: $query, namespace: $this->namespace));
 
         return [
             'packages' => $packages,
@@ -175,6 +179,12 @@ public function viewData(): array
             'phpTags' => $options['php'],
             'catalogueQuery' => $query,
             'categoryOptions' => $categoryOptions,
+            'catalogueRoute' => $this->namespace !== null ? [
+                '_name' => 'plugin:namespace',
+                'namespace' => $this->namespace,
+            ] : [
+                '_name' => 'plugin:index',
+            ],
         ];
     }
 }
diff --git a/src/Island/NamespaceProfileIsland.php b/src/Island/NamespaceProfileIsland.php
new file mode 100644
index 00000000..efa7fff5
--- /dev/null
+++ b/src/Island/NamespaceProfileIsland.php
@@ -0,0 +1,37 @@
+<?php
+declare(strict_types=1);
+
+namespace App\Island;
+
+use App\Service\GithubProfileService;
+use Interact\Attribute\Prop;
+use Interact\Island;
+
+/**
+ * Enrich namespace identity after the hero has rendered.
+ */
+class NamespaceProfileIsland extends Island
+{
+    #[Prop]
+    public string $namespace = '';
+
+    #[Prop]
+    public string $githubUrl = '';
+
+    /**
+     * Resolving the service performs no remote work during placeholder rendering.
+     */
+    public function __construct(private readonly GithubProfileService $profiles)
+    {
+    }
+
+    /**
+     * @return array<string, mixed>
+     */
+    public function viewData(): array
+    {
+        return [
+            'profile' => $this->profiles->profile(basename($this->githubUrl)),
+        ];
+    }
+}
diff --git a/src/Island/PublishersIsland.php b/src/Island/PublishersIsland.php
new file mode 100644
index 00000000..0ec30abf
--- /dev/null
+++ b/src/Island/PublishersIsland.php
@@ -0,0 +1,131 @@
+<?php
+declare(strict_types=1);
+
+namespace App\Island;
+
+use App\Model\Table\PackagesTable;
+use App\Service\GithubProfileService;
+use Cake\Http\Exception\BadRequestException;
+use Interact\Attribute\Action;
+use Interact\Attribute\Pagination;
+use Interact\Attribute\State;
+use Interact\Island;
+use Interact\Pagination\PaginationState;
+use Interact\UpdatedPaths;
+
+/**
+ * Searches and ranks publishers without fetching external profile metadata.
+ */
+class PublishersIsland extends Island
+{
+    #[State(writable: true, url: true)]
+    public string $search = '';
+
+    #[State(writable: true, url: true, history: true)]
+    public string $sort = 'monthly_downloads';
+
+    #[State(writable: true, url: true, history: true)]
+    public string $cakephp = 'current';
+
+    #[Pagination(
+        settings: [
+            'limit' => 20,
+            'maxLimit' => 20,
+            'sortableFields' => [],
+        ],
+        url: ['page' => 'page'],
+        history: true,
+    )]
+    public PaginationState $paging;
+
+    /**
+     * Only the pure avatar URL builder is needed; profile lookups remain on profile pages.
+     */
+    public function __construct(private readonly GithubProfileService $profiles)
+    {
+    }
+
+    /**
+     * Preserve explicit history paging while resetting pages after filter changes.
+     */
+    public function updated(UpdatedPaths $paths): void
+    {
+        if (($paths->has('search') || $paths->has('sort') || $paths->has('cakephp')) && !$paths->has('paging.page')) {
+            $this->paging->page = 1;
+        }
+    }
+
+    /**
+     * Retain the selected popularity metric when clearing a search.
+     */
+    #[Action]
+    public function clearSearch(): void
+    {
+        $this->search = '';
+        $this->paging->page = 1;
+    }
+
+    /**
+     * Aggregate once, then batch-load details for the visible page.
+     *
+     * @return array<string, mixed>
+     */
+    public function viewData(): array
+    {
+        if (mb_strlen($this->search) > 100) {
+            throw new BadRequestException('Search query is too long.');
+        }
+        $sortOptions = [
+            'monthly_downloads' => __('Monthly downloads'),
+            'downloads' => __('Lifetime downloads'),
+            'stars' => __('Stars'),
+            'plugins' => __('Plugin count'),
+        ];
+        if (!isset($sortOptions[$this->sort])) {
+            $this->sort = 'monthly_downloads';
+        }
+        $packages = $this->fetchTable(PackagesTable::class);
+        $majors = $packages->publisherMajors();
+        $current = $majors[0] ?? null;
+        $versionOptions = [];
+        if ($current !== null) {
+            $versionOptions['current'] = __('CakePHP {0} (current)', $current);
+            foreach ($majors as $major) {
+                if ($major !== $current) {
+                    $versionOptions[$major] = __('CakePHP {0}', $major);
+                }
+            }
+        }
+        $versionOptions['all'] = __('All versions');
+        if (!isset($versionOptions[$this->cakephp])) {
+            $this->cakephp = $current !== null ? 'current' : 'all';
+        }
+        $major = match ($this->cakephp) {
+            'all' => null,
+            'current' => $current,
+            default => $this->cakephp,
+        };
+        $publishers = $this->paginate($packages->unhydratedFind('publishers', search: $this->search, sort: $this->sort, major: $major));
+        $namespaces = [];
+        foreach ($publishers as $publisher) {
+            $namespaces[] = $publisher['namespace'];
+        }
+        $details = $packages->publisherDetails($namespaces, $this->sort, $major);
+        foreach ($details as &$detail) {
+            $detail['avatarUrl'] = $detail['githubUrl'] !== null
+                ? $this->profiles->avatarUrl(basename($detail['githubUrl']), 96)
+                : null;
+        }
+        unset($detail);
+
+        return [
+            'publishers' => $publishers,
+            'details' => $details,
+            'sortOptions' => $sortOptions,
+            'versionOptions' => $versionOptions,
+            'selectedMajor' => $major,
+            'showRanks' => trim($this->search) === '',
+            'rankStart' => ($this->paging->page - 1) * $this->paging->limit + 1,
+        ];
+    }
+}
diff --git a/src/Model/Entity/Package.php b/src/Model/Entity/Package.php
index e2a4a8d8..9e69b234 100644
--- a/src/Model/Entity/Package.php
+++ b/src/Model/Entity/Package.php
@@ -12,9 +12,11 @@
  *
  * @property int $id
  * @property string $package
+ * @property string $namespace
  * @property string $description
  * @property string $repo_url
  * @property int $downloads
+ * @property int|null $monthly_downloads
  * @property int $stars
  * @property string|null $latest_stable_version
  * @property \Cake\I18n\Date|null $latest_stable_release_date
@@ -42,6 +44,7 @@ class Package extends Entity
     #[Override]
     protected array $_accessible = [
         'id' => false,
+        'namespace' => false,
         '*' => true,
     ];
 
diff --git a/src/Model/Table/PackagesTable.php b/src/Model/Table/PackagesTable.php
index 77924cdc..606fd1a6 100644
--- a/src/Model/Table/PackagesTable.php
+++ b/src/Model/Table/PackagesTable.php
@@ -4,8 +4,12 @@
 namespace App\Model\Table;
 
 use App\Model\Filter\PackagesCollection;
+use ArrayObject;
 use Cake\Cache\Cache;
+use Cake\Database\Expression\FunctionExpression;
 use Cake\Database\Expression\QueryExpression;
+use Cake\Datasource\EntityInterface;
+use Cake\Event\EventInterface;
 use Cake\ORM\Query\SelectQuery;
 use Cake\ORM\Table;
 use Cake\Validation\Validator;
@@ -87,6 +91,10 @@ public function validationDefault(Validator $validator): Validator
             ->requirePresence('downloads', 'create')
             ->notEmptyString('downloads');
 
+        $validator
+            ->nonNegativeInteger('monthly_downloads')
+            ->allowEmptyString('monthly_downloads');
+
         $validator
             ->integer('stars')
             ->requirePresence('stars', 'create')
@@ -105,6 +113,20 @@ public function validationDefault(Validator $validator): Validator
         return $validator;
     }
 
+    /**
+     * Derive the indexed vendor whenever an import creates or renames a package.
+     *
+     * @param \Cake\Event\EventInterface $event Save event.
+     * @param \Cake\Datasource\EntityInterface $entity Package being saved.
+     * @param \ArrayObject<string, mixed> $options Save options.
+     */
+    public function beforeSave(EventInterface $event, EntityInterface $entity, ArrayObject $options): void
+    {
+        if ($entity->isNew() || $entity->isDirty('package')) {
+            $entity->set('namespace', strtolower(explode('/', (string)$entity->get('package'), 2)[0]));
+        }
+    }
+
     /**
      * Build the public catalogue with its version associations.
      *
@@ -112,8 +134,11 @@ public function validationDefault(Validator $validator): Validator
      * @param array<string, mixed> $filters Accepted search and version filters.
      * @return \Cake\ORM\Query\SelectQuery<\App\Model\Entity\Package>
      */
-    public function findCatalogue(SelectQuery $query, array $filters): SelectQuery
+    public function findCatalogue(SelectQuery $query, array $filters, ?string $namespace = null): SelectQuery
     {
+        if ($namespace !== null) {
+            $query->find('namespace', namespace: $namespace);
+        }
         $query->find('search', search: $filters)
             ->contain(['Categories', 'Tags' => static fn(SelectQuery $tags) => $tags->orderByDesc('Tags.label')]);
         if (!empty($filters['category']) || !empty($filters['awesome'])) {
@@ -131,6 +156,214 @@ public function findCatalogue(SelectQuery $query, array $filters): SelectQuery
         return $query;
     }
 
+    /**
+     * Match the indexed Composer namespace exactly.
+     *
+     * @param \Cake\ORM\Query\SelectQuery<\App\Model\Entity\Package> $query Package query.
+     * @return \Cake\ORM\Query\SelectQuery<\App\Model\Entity\Package>
+     */
+    public function findNamespace(SelectQuery $query, string $namespace): SelectQuery
+    {
+        return $query->where([
+            $this->aliasField('namespace') => $namespace,
+        ]);
+    }
+
+    /**
+     * Rank Composer namespaces from packages supporting the selected CakePHP major.
+     *
+     * @param \Cake\ORM\Query\SelectQuery $query Package query.
+     * @param string $search Case-insensitive namespace substring.
+     * @param string $sort Popularity metric.
+     * @param string|null $major CakePHP major; null includes all versions.
+     * @return \Cake\ORM\Query\SelectQuery
+     */
+    public function findPublishers(SelectQuery $query, string $search = '', string $sort = 'monthly_downloads', ?string $major = null): SelectQuery
+    {
+        $query->select([
+            'namespace' => $this->aliasField('namespace'),
+            'plugins' => $query->func()->count('*'),
+            'downloads' => $query->func()->sum($this->aliasField('downloads')),
+            'monthly_downloads' => $query->expr()->case()
+                ->when($query->expr()->eq($query->func()->count($this->aliasField('monthly_downloads')), $query->func()->count('*')))
+                ->then($query->func()->sum($this->aliasField('monthly_downloads'))),
+            'stars' => $query->func()->sum($this->aliasField('stars')),
+            'latest_release' => $query->func()->max($this->aliasField('latest_stable_release_date'))->setReturnType('string'),
+        ])->where([
+            $this->aliasField('namespace') . ' !=' => '',
+        ])->groupBy($this->aliasField('namespace'));
+
+        if ($major !== null) {
+            $query->where($query->expr()->exists($this->publisherCompatibility($major)));
+        }
+
+        $search = mb_strtolower(trim($search));
+        if ($search !== '') {
+            $query->where($query->expr()->gt(new FunctionExpression('INSTR', [
+                $this->aliasField('namespace') => 'identifier',
+                $search,
+            ]), 0, 'integer'));
+        }
+        $sort = match ($sort) {
+            'downloads', 'stars', 'plugins' => $sort,
+            default => 'monthly_downloads',
+        };
+
+        return $query->orderBy([
+            $sort => 'DESC',
+            $this->aliasField('namespace') => 'ASC',
+        ]);
+    }
+
+    /**
+     * Batch profile owners and two popular plugins for the visible publishers.
+     *
+     * @param list<string> $namespaces Visible namespace names.
+     * @param string $sort Popularity metric; plugin-count rankings preview monthly downloads.
+     * @param string|null $major CakePHP major; null includes all versions.
+     * @return array<string, array{githubUrl: string|null, plugins: list<array{package: string, name: string}>}>
+     */
+    public function publisherDetails(array $namespaces, string $sort = 'monthly_downloads', ?string $major = null): array
+    {
+        if ($namespaces === []) {
+            return [];
+        }
+        $details = array_fill_keys($namespaces, ['githubUrl' => null, 'plugins' => []]);
+        $owners = [];
+        $metric = match ($sort) {
+            'stars', 'downloads' => $sort,
+            default => 'monthly_downloads',
+        };
+        $packages = $this->find()->select(['namespace', 'package', 'repo_url'])
+            ->where(['namespace IN' => $namespaces])
+            ->orderBy([
+                $this->aliasField($metric) => 'DESC',
+                $this->aliasField('package') => 'ASC',
+            ]);
+        if ($major !== null) {
+            $packages->select(['publisher_compatible' => $packages->expr()->exists($this->publisherCompatibility($major))]);
+        }
+        foreach ($packages->all() as $package) {
+            $namespace = $package->namespace;
+            $owner = $this->githubOwner($package->repo_url);
+            if ($owner !== null) {
+                $owners[$namespace][$owner] = true;
+            }
+            if (($major === null || $package->get('publisher_compatible')) && count($details[$namespace]['plugins']) < 2) {
+                $details[$namespace]['plugins'][] = [
+                    'package' => $package->package,
+                    'name' => explode('/', $package->package, 2)[1],
+                ];
+            }
+        }
+        foreach ($owners as $namespace => $namespaceOwners) {
+            if (count($namespaceOwners) === 1) {
+                $details[$namespace]['githubUrl'] = 'https://github.com/' . array_key_first($namespaceOwners);
+            }
+        }
+
+        return $details;
+    }
+
+    /**
+     * EXISTS counts a compatible package once even when several minor-version tags match.
+     *
+     * @return \Cake\ORM\Query\SelectQuery
+     */
+    private function publisherCompatibility(string $major): SelectQuery
+    {
+        $junction = $this->Tagged->getTarget();
+        $alias = $junction->getAlias();
+
+        return $junction->find()->select([$alias . '.fk_id'])
+            ->innerJoin(['PublisherVersion' => $this->Tags->getTarget()->getTable()], ['PublisherVersion.id = ' . $alias . '.tag_id'])
+            ->where([
+                $alias . '.fk_model' => $this->getAlias(),
+                'PublisherVersion.slug LIKE' => 'cakephp-' . $major . '-%',
+            ])
+            ->where(static fn(QueryExpression $exp) => $exp->equalFields($alias . '.fk_id', 'Packages.id'));
+    }
+
+    /**
+     * Derive supported major choices from the catalogue's existing compatibility metadata.
+     *
+     * @return list<string>
+     */
+    public function publisherMajors(): array
+    {
+        $majors = [];
+        foreach (array_keys($this->filterOptions()['cakephp']) as $slug) {
+            if (preg_match('/^cakephp-(\d+)-\d+$/D', $slug, $matches)) {
+                $major = $matches[1];
+                if (!in_array($major, $majors, true)) {
+                    $majors[] = $major;
+                }
+            }
+        }
+
+        return $majors;
+    }
+
+    /**
+     * Hero totals cover the namespace before any interactive filters are applied.
+     *
+     * @return array{plugins: int, downloads: int, stars: int}
+     */
+    public function namespaceStats(string $namespace): array
+    {
+        $query = $this->find('namespace', namespace: $namespace);
+        $totals = $query->select([
+            'plugins' => $query->func()->count('*'),
+            'downloads' => $query->func()->sum('Packages.downloads'),
+            'stars' => $query->func()->sum('Packages.stars'),
+        ])->first();
+
+        return [
+            'plugins' => (int)($totals?->get('plugins') ?? 0),
+            'downloads' => (int)($totals?->get('downloads') ?? 0),
+            'stars' => (int)($totals?->get('stars') ?? 0),
+        ];
+    }
+
+    /**
+     * Link only an unambiguous GitHub repository owner, never guess from the Composer prefix.
+     */
+    public function namespaceGithubUrl(string $namespace): ?string
+    {
+        $owners = [];
+        $repositories = $this->find('namespace', namespace: $namespace)->select(['repo_url'])->distinct()->all();
+        foreach ($repositories as $package) {
+            $owner = $this->githubOwner($package->repo_url);
+            if ($owner !== null) {
+                $owners[$owner] = true;
+            }
+            if (count($owners) > 1) {
+                return null;
+            }
+        }
+
+        return $owners !== [] ? 'https://github.com/' . array_key_first($owners) : null;
+    }
+
+    /**
+     * Resolve repository owners consistently for profile pages and publisher rows.
+     */
+    private function githubOwner(string $url): ?string
+    {
+        $url = preg_replace('#^git@github\.com:#i', 'https://github.com/', trim($url)) ?? $url;
+        $host = strtolower((string)parse_url($url, PHP_URL_HOST));
+        $parts = explode('/', trim((string)parse_url($url, PHP_URL_PATH), '/'));
+        if (
+            !in_array($host, ['github.com', 'www.github.com'], true) ||
+            count($parts) < 2 || $parts[1] === '' ||
+            !preg_match('/^[a-z0-9][a-z0-9-]*$/iD', $parts[0])
+        ) {
+            return null;
+        }
+
+        return strtolower($parts[0]);
+    }
+
     /**
      * Load configured featured packages without changing their display order.
      *
@@ -158,15 +391,20 @@ public function findFeaturedCandidates(SelectQuery $query, string $search = ''):
     }
 
     /**
-     * @return array<string, array{name: string, count: int}> Imported categories and their directory-wide package counts.
+     * @return array<string, array{name: string, count: int}> Categories and counts within the current catalogue scope.
      */
-    public function categoryOptions(): array
+    public function categoryOptions(?string $namespace = null): array
     {
         $query = $this->Categories->find();
         $query->select(['Categories.slug', 'Categories.name', 'package_count' => $query->func()->count('CategoryMemberships.package_id')])
             ->leftJoin(['CategoryMemberships' => 'categories_packages'], ['CategoryMemberships.category_id = Categories.id'])
             ->groupBy(['Categories.id', 'Categories.slug', 'Categories.name'])
             ->orderByAsc('Categories.name');
+        if ($namespace !== null) {
+            $query->where([
+                'CategoryMemberships.package_id IN' => $this->find('namespace', namespace: $namespace)->select(['id']),
+            ]);
+        }
         $options = [];
         foreach ($query->all() as $category) {
             $options[$category->get('slug')] = ['name' => $category->get('name'), 'count' => (int)$category->get('package_count')];
diff --git a/src/Service/GithubApiService.php b/src/Service/GithubApiService.php
new file mode 100644
index 00000000..62b15004
--- /dev/null
+++ b/src/Service/GithubApiService.php
@@ -0,0 +1,49 @@
+<?php
+declare(strict_types=1);
+
+namespace App\Service;
+
+use Cake\Http\Client;
+use Cake\Http\Client\Response;
+use InvalidArgumentException;
+
+/**
+ * Shares GitHub request defaults without retaining a user's OAuth token.
+ */
+class GithubApiService
+{
+    /**
+     * The optional application token is used only when no per-request token is supplied.
+     */
+    public function __construct(
+        private readonly Client $client,
+        private readonly string $token = '',
+    ) {
+    }
+
+    /**
+     * @param string $path API path relative to api.github.com, starting with a slash.
+     * @param array<string, mixed> $query Query parameters.
+     * @param string|null $token OAuth token for this request only.
+     */
+    public function get(string $path, array $query = [], ?string $token = null): Response
+    {
+        if (!str_starts_with($path, '/') || str_starts_with($path, '//')) {
+            throw new InvalidArgumentException('GitHub API requests require a relative path starting with one slash.');
+        }
+        $headers = [
+            'Accept' => 'application/vnd.github+json',
+            'User-Agent' => 'plugins.cakephp.org',
+            'X-GitHub-Api-Version' => '2022-11-28',
+        ];
+        $token ??= $this->token;
+        if ($token !== '') {
+            $headers['Authorization'] = 'Bearer ' . $token;
+        }
+
+        return $this->client->get('https://api.github.com' . $path, $query, [
+            'timeout' => 3,
+            'headers' => $headers,
+        ]);
+    }
+}
diff --git a/src/Service/GithubProfileService.php b/src/Service/GithubProfileService.php
new file mode 100644
index 00000000..41642360
--- /dev/null
+++ b/src/Service/GithubProfileService.php
@@ -0,0 +1,83 @@
+<?php
+declare(strict_types=1);
+
+namespace App\Service;
+
+use Cake\Cache\Cache;
+use Psr\Http\Client\ClientExceptionInterface;
+
+/**
+ * Cache public GitHub profile details independently of authentication records.
+ */
+class GithubProfileService
+{
+    /**
+     * Construct without fetching; lazy island rendering owns the network request.
+     */
+    public function __construct(private readonly GithubApiService $github)
+    {
+    }
+
+    /**
+     * Build an avatar URL without performing an API request.
+     */
+    public function avatarUrl(string $owner, int $size = 192): ?string
+    {
+        if (!preg_match('/^[a-z0-9][a-z0-9-]*$/iD', $owner)) {
+            return null;
+        }
+
+        return 'https://github.com/' . rawurlencode(strtolower($owner)) . '.png?size=' . $size;
+    }
+
+    /**
+     * @return array{avatarUrl: string|null, bio: string|null}|null
+     */
+    public function profile(string $owner): ?array
+    {
+        $avatarUrl = $this->avatarUrl($owner);
+        if ($avatarUrl === null) {
+            return null;
+        }
+        $owner = strtolower($owner);
+        $fallback = [
+            'avatarUrl' => $avatarUrl,
+            'bio' => null,
+        ];
+        $key = 'github_profile_v2_' . $owner;
+        $cache = Cache::pool('github_profiles');
+        $cached = $cache->get($key);
+        if (is_array($cached)) {
+            return $cached !== [] ? [
+                'avatarUrl' => $cached['avatarUrl'] ?? $fallback['avatarUrl'],
+                'bio' => $cached['bio'] ?? null,
+            ] : $fallback;
+        }
+
+        $profile = null;
+        try {
+            $response = $this->github->get('/users/' . rawurlencode($owner));
+            $data = $response->isOk() ? $response->getJson() : null;
+            if (is_array($data) && is_string($data['login'] ?? null) && strcasecmp($data['login'], $owner) === 0) {
+                $avatarUrl = $data['avatar_url'] ?? null;
+                if (
+                    !is_string($avatarUrl) ||
+                    parse_url($avatarUrl, PHP_URL_SCHEME) !== 'https' ||
+                    !in_array(parse_url($avatarUrl, PHP_URL_HOST), ['avatars.githubusercontent.com', 'github.com'], true)
+                ) {
+                    $avatarUrl = $fallback['avatarUrl'];
+                }
+                $bio = is_string($data['bio'] ?? null) ? trim($data['bio']) : '';
+                $profile = [
+                    'avatarUrl' => $avatarUrl,
+                    'bio' => $bio !== '' ? $bio : null,
+                ];
+            }
+        } catch (ClientExceptionInterface) {
+            // Optional enrichment must not prevent the catalogue from rendering.
+        }
+        $cache->set($key, $profile ?? [], $profile !== null ? 86400 : 900);
+
+        return $profile ?? $fallback;
+    }
+}
diff --git a/src/Service/PackagistImporter.php b/src/Service/PackagistImporter.php
index d0c7cf8d..52045a37 100644
--- a/src/Service/PackagistImporter.php
+++ b/src/Service/PackagistImporter.php
@@ -106,7 +106,7 @@ public function sync(?callable $progress = null): array
     }
 
     /**
-     * @return array{package: string, description: string, repo_url: string, downloads: int, stars: int, tag_list: array, latest_stable_version: ?string, latest_stable_release_date: ?\Cake\I18n\Date, is_abandoned: bool}
+     * @return array{package: string, description: string, repo_url: string, downloads: int, monthly_downloads: int, stars: int, tag_list: array, latest_stable_version: ?string, latest_stable_release_date: ?\Cake\I18n\Date, is_abandoned: bool}
      */
     private function getDataForPackage(string $packageName): array
     {
@@ -119,6 +119,7 @@ private function getDataForPackage(string $packageName): array
                 'description' => $metaDetails->getDescription(),
                 'repo_url' => $metaDetails->getRepository(),
                 'downloads' => $metaDetails->getDownloads()->getTotal(),
+                'monthly_downloads' => $metaDetails->getDownloads()->getMonthly(),
                 'stars' => $metaDetails->getGithubStars(),
                 'tag_list' => [],
                 'latest_stable_version' => null,
@@ -166,6 +167,7 @@ private function getDataForPackage(string $packageName): array
             'description' => $metaDetails->getDescription(),
             'repo_url' => $metaDetails->getRepository(),
             'downloads' => $metaDetails->getDownloads()->getTotal(),
+            'monthly_downloads' => $metaDetails->getDownloads()->getMonthly(),
             'stars' => $metaDetails->getGithubStars(),
             'tag_list' => $meta,
             'latest_stable_version' => $latestStable ? $latestStable->getVersion() : null,
diff --git a/src/View/AppView.php b/src/View/AppView.php
index d2bbe6c4..7a214a6b 100644
--- a/src/View/AppView.php
+++ b/src/View/AppView.php
@@ -15,6 +15,7 @@
  */
 namespace App\View;
 
+use App\View\Helper\NumberHelper;
 use Cake\View\View;
 
 /**
@@ -25,6 +26,7 @@
  * @link https://book.cakephp.org/5/en/views.html#the-app-view
  * @property \Authentication\View\Helper\IdentityHelper $Identity
  * @property \App\View\Helper\UserHelper $User
+ * @property \App\View\Helper\NumberHelper $Number
  * @property \Interact\View\Helper\InteractHelper $Interact
  * @property \CakeVite\View\Helper\ViteHelper $Vite
  */
@@ -44,6 +46,7 @@ public function initialize(): void
         $this->loadHelper('Paginator', ['templates' => 'paginator-templates']);
         $this->loadHelper('Form', ['templates' => 'form-templates']);
         $this->loadHelper('Html', ['templates' => 'html-templates']);
+        $this->loadHelper('Number', ['className' => NumberHelper::class]);
         $this->loadHelper('Authentication.Identity');
         $this->loadHelper('User');
         $this->loadHelper('Interact.Interact');
diff --git a/src/View/Helper/NumberHelper.php b/src/View/Helper/NumberHelper.php
new file mode 100644
index 00000000..f00dfe26
--- /dev/null
+++ b/src/View/Helper/NumberHelper.php
@@ -0,0 +1,36 @@
+<?php
+declare(strict_types=1);
+
+namespace App\View\Helper;
+
+use Cake\View\Helper\NumberHelper as CakeNumberHelper;
+
+/**
+ * Adds compact counters to CakePHP's locale-aware number formatting.
+ */
+class NumberHelper extends CakeNumberHelper
+{
+    /**
+     * Format a count with at most one decimal and a k, M, or B suffix.
+     */
+    public function compact(int $value): string
+    {
+        $divisor = match (true) {
+            $value >= 1_000_000_000 => 1_000_000_000,
+            $value >= 1_000_000 => 1_000_000,
+            $value >= 1_000 => 1_000,
+            default => 1,
+        };
+        $suffix = match ($divisor) {
+            1_000_000_000 => 'B',
+            1_000_000 => 'M',
+            1_000 => 'k',
+            default => '',
+        };
+
+        return $this->format($value / $divisor, [
+            'precision' => $divisor === 1 ? 0 : 1,
+            'after' => $suffix,
+        ]);
+    }
+}
diff --git a/src/View/IslandTemplateView.php b/src/View/IslandTemplateView.php
index 1f5d2428..2f49a561 100644
--- a/src/View/IslandTemplateView.php
+++ b/src/View/IslandTemplateView.php
@@ -3,11 +3,14 @@
 
 namespace App\View;
 
+use App\View\Helper\NumberHelper;
 use Interact\View\Helper\PaginatorHelper;
 use Interact\View\TemplateView;
 
 /**
  * Shares application presentation templates with isolated island renders.
+ *
+ * @property \App\View\Helper\NumberHelper $Number
  */
 class IslandTemplateView extends TemplateView
 {
@@ -19,6 +22,7 @@ public function initialize(): void
         parent::initialize();
         $this->addHelper('Form', ['templates' => 'form-templates', 'autoSetCustomValidity' => false]);
         $this->addHelper('Html', ['templates' => 'html-templates']);
+        $this->addHelper('Number', ['className' => NumberHelper::class]);
         $this->addHelper('Paginator', ['className' => PaginatorHelper::class, 'templates' => 'paginator-templates']);
     }
 }
diff --git a/templates/Packages/by_namespace.php b/templates/Packages/by_namespace.php
new file mode 100644
index 00000000..f394b587
--- /dev/null
+++ b/templates/Packages/by_namespace.php
@@ -0,0 +1,57 @@
+<?php
+/**
+ * @var \App\View\AppView $this
+ * @var string $namespace
+ * @var array{plugins: int, downloads: int, stars: int} $stats
+ * @var string|null $githubUrl
+ * @var array|string $backUrl
+ */
+$this->assign('title', __('Plugins by {0}', $namespace));
+$statLabels = [
+    'plugins' => __('Plugins'),
+    'downloads' => __('Downloads'),
+    'stars' => __('Stars'),
+];
+?>
+<header class="namespace-hero" data-namespace-banner>
+    <div class="site-width relative">
+        <div class="namespace-toolbar">
+            <?= $this->Html->link('← ' . __('Back'), $backUrl, [
+                'class' => 'inline-flex min-h-8 items-center text-sm text-muted',
+                'x-interact:navigate' => '',
+            ]) ?>
+        </div>
+        <div class="namespace-profile">
+            <?php if ($githubUrl !== null) : ?>
+                <?= $this->Interact->render(
+                    'NamespaceProfile',
+                    props: compact('namespace', 'githubUrl'),
+                    key: 'namespace-profile-' . $namespace,
+                    loading: 'lazy',
+                    placeholder: 'Loading/namespace_profile',
+                ) ?>
+            <?php else : ?>
+                <?= $this->element('Namespaces/profile', [
+                    'namespace' => $namespace,
+                    'githubUrl' => null,
+                    'profile' => null,
+                    'loading' => false,
+                ]) ?>
+            <?php endif; ?>
+            <section class="namespace-statistics" aria-label="<?= __('Namespace statistics') ?>" data-namespace-stats x-data="namespaceCounters">
+                <dl class="grid grid-cols-3 gap-4 md:grid-cols-[minmax(0,1fr)_minmax(0,1.4fr)_minmax(0,1fr)] md:gap-10">
+                    <?php foreach ($statLabels as $key => $label) : ?>
+                        <div class="flex min-w-0 flex-col gap-2">
+                            <dt class="order-1 text-xs text-muted md:text-sm"><?= h($label) ?></dt>
+                            <dd class="namespace-stat-value"
+                                title="<?= h($this->Number->format($stats[$key])) ?>" aria-label="<?= h($this->Number->format($stats[$key])) ?>"
+                                data-count-up-value="<?= h($stats[$key]) ?>" data-namespace-stat="<?= h($key) ?>"><?= h($this->Number->compact($stats[$key])) ?></dd>
+                        </div>
+                    <?php endforeach; ?>
+                </dl>
+            </section>
+        </div>
+    </div>
+</header>
+<?= $this->Interact->render('Catalogue', props: compact('namespace'), key: 'namespace-catalogue-' . $namespace) ?>
+<?= $this->element('Packages/plugin-modal') ?>
diff --git a/templates/Packages/view.php b/templates/Packages/view.php
index 19cad8ba..315723f3 100644
--- a/templates/Packages/view.php
+++ b/templates/Packages/view.php
@@ -4,10 +4,16 @@
  * @var \App\Model\Entity\Package $package
  */
 $this->assign('title', $package->package);
+[$namespace, $name] = explode('/', $package->package, 2);
+$this->assign('canonicalUrl', $this->Url->build([
+    '_name' => 'plugin:view',
+    'namespace' => $namespace,
+    'name' => $name,
+], ['fullBase' => true]));
 ?>
 <div class="plugin-page site-width">
     <h1 class="sr-only"><?= h($package->package) ?></h1>
-    <a class="mb-5 inline-flex items-center gap-2 text-sm leading-[1.6]" href="<?= $this->Url->build(['controller' => 'Packages', 'action' => 'index']) ?>" x-interact:navigate>
+    <a class="mb-5 inline-flex items-center gap-2 text-sm leading-[1.6]" href="<?= $this->Url->build(['_name' => 'plugin:index']) ?>" x-interact:navigate>
         <span aria-hidden="true">←</span> <?= __('Browse plugins') ?>
     </a>
     <div class="plugin-page-panel">
diff --git a/templates/Publishers/index.php b/templates/Publishers/index.php
new file mode 100644
index 00000000..60a6baf9
--- /dev/null
+++ b/templates/Publishers/index.php
@@ -0,0 +1,11 @@
+<?php
+/** @var \App\View\AppView $this */
+$this->assign('title', __('Publishers'));
+?>
+<div class="site-width pt-6 md:pt-10">
+    <header class="page-intro">
+        <h1><?= __('Publishers') ?></h1>
+        <p><?= __('Discover the people and teams behind CakePHP plugins, ranked by current usage and compatibility.') ?></p>
+    </header>
+</div>
+<?= $this->Interact->render('Publishers', key: 'publishers-directory') ?>
diff --git a/templates/element/Loading/namespace_profile.php b/templates/element/Loading/namespace_profile.php
new file mode 100644
index 00000000..4c7174c0
--- /dev/null
+++ b/templates/element/Loading/namespace_profile.php
@@ -0,0 +1,32 @@
+<?php
+/**
+ * @var \App\View\IslandTemplateView $this
+ * @var string $namespace
+ * @var string $githubUrl
+ */
+?>
+<div data-namespace-profile-loading>
+    <?= $this->element('Namespaces/profile', [
+        'namespace' => $namespace,
+        'githubUrl' => $githubUrl,
+        'profile' => null,
+        'loading' => true,
+    ]) ?>
+    <span class="sr-only" role="status" x-show="!$server.error"><?= __('Loading GitHub profile…') ?></span>
+    <div class="mt-3 text-sm text-muted" x-show="$server.error" x-cloak>
+        <p role="alert"><?= __('The GitHub profile could not be loaded.') ?></p>
+        <?= $this->Form->button(__('Try again'), [
+            'type' => 'button',
+            'class' => 'btn btn-ghost btn-sm mt-2',
+            '@click' => '$server.sync()',
+            'x-show' => '$server.error && $server.error.recovery === "retry"',
+            ':disabled' => '$server.busy',
+        ]) ?>
+        <?= $this->Form->button(__('Reload page'), [
+            'type' => 'button',
+            'class' => 'btn btn-ghost btn-sm mt-2',
+            '@click' => 'window.location.reload()',
+            'x-show' => '$server.error && $server.error.recovery === "reload"',
+        ]) ?>
+    </div>
+</div>
diff --git a/templates/element/Namespaces/profile.php b/templates/element/Namespaces/profile.php
new file mode 100644
index 00000000..01665f19
--- /dev/null
+++ b/templates/element/Namespaces/profile.php
@@ -0,0 +1,55 @@
+<?php
+/**
+ * @var \App\View\AppView|\App\View\IslandTemplateView $this
+ * @var string $namespace
+ * @var string|null $githubUrl
+ * @var array{avatarUrl: string|null, bio: string|null}|null $profile
+ * @var bool $loading
+ */
+$packagistUrl = 'https://packagist.org/packages/' . rawurlencode($namespace) . '/';
+?>
+<section class="min-w-0" aria-labelledby="namespace-title" data-namespace-hero>
+    <div class="namespace-identity">
+        <div class="avatar avatar-placeholder shrink-0" x-data="{ failed: false }" aria-hidden="true">
+            <div class="namespace-avatar">
+                <span><?= h(mb_strtoupper(mb_substr($namespace, 0, 2))) ?></span>
+                <?php if ($loading) : ?>
+                    <div class="skeleton absolute inset-0 rounded-[inherit] motion-reduce:animate-none" x-show="!$server.error"></div>
+                <?php elseif ($profile['avatarUrl'] ?? null) : ?>
+                    <?= $this->Html->image($profile['avatarUrl'], [
+                        'alt' => '',
+                        'width' => 96,
+                        'height' => 96,
+                        'decoding' => 'async',
+                        'referrerpolicy' => 'no-referrer',
+                        'x-show' => '!failed',
+                        '@error' => 'failed = true',
+                        'x-init' => 'failed = $el.complete && $el.naturalWidth === 0',
+                        'data-namespace-avatar' => '',
+                    ]) ?>
+                <?php endif; ?>
+            </div>
+        </div>
+        <div class="min-w-0 flex-1">
+            <h1 id="namespace-title" class="namespace-title"><?= h($namespace) ?></h1>
+            <p class="namespace-description" data-namespace-description><?= h($profile['bio'] ?? __('Plugins for your CakePHP projects.')) ?></p>
+        </div>
+    </div>
+    <nav class="namespace-profile-links" aria-label="<?= __('Namespace profiles') ?>">
+        <?php if ($githubUrl !== null) : ?>
+            <a class="namespace-profile-link btn btn-ghost btn-square btn-sm" href="<?= h($githubUrl) ?>" target="_blank" rel="noopener noreferrer"
+               aria-label="<?= __('GitHub profile') ?>" title="<?= __('GitHub profile') ?>">
+                <?= $this->element('github_icon') ?>
+            </a>
+        <?php endif; ?>
+        <a class="namespace-profile-link btn btn-ghost btn-square btn-sm" href="<?= h($packagistUrl) ?>" target="_blank" rel="noopener noreferrer"
+           aria-label="<?= __('Packagist') ?>" title="<?= __('Packagist') ?>">
+            <?= $this->Html->image('packagist-logo.png', [
+                'alt' => '',
+                'width' => 22,
+                'height' => 22,
+                'class' => 'size-5.5',
+            ]) ?>
+        </a>
+    </nav>
+</section>
diff --git a/templates/element/Packages/category_browser.php b/templates/element/Packages/category_browser.php
index 0cd279b8..d0fa5170 100644
--- a/templates/element/Packages/category_browser.php
+++ b/templates/element/Packages/category_browser.php
@@ -7,6 +7,7 @@
  * @var string $category
  * @var array<string, mixed> $catalogueQuery
  * @var string $clearCategoryUrl
+ * @var array<string, mixed> $catalogueRoute
  */
 $allCategoriesSelected = $category === '';
 ?>
@@ -46,7 +47,7 @@
                 $categoryQuery = array_replace($catalogueQuery, ['category' => $slug]);
                 $categorySelected = $slug === $category;
                 ?>
-                <a class="category-choice" href="<?= $this->Url->build(['plugin' => null, 'controller' => 'Packages', 'action' => 'index', '?' => $categoryQuery]) ?>"
+                <a class="category-choice" href="<?= $this->Url->build($catalogueRoute + ['?' => $categoryQuery]) ?>"
                    data-category-slug="<?= h($slug) ?>" data-category-name="<?= h($option['name']) ?>"
                    aria-label="<?= h(__n('{0}, {1} plugin', '{0}, {1} plugins', $option['count'], $option['name'], $option['count'])) ?>"
                    title="<?= __('Total plugins in this category') ?>" x-show="matchesCategory($el.dataset.categoryName)" <?= $categorySelected ? 'aria-current="true"' : '' ?>>
diff --git a/templates/element/Packages/package-row.php b/templates/element/Packages/package-row.php
index 2704ffcc..6505c265 100644
--- a/templates/element/Packages/package-row.php
+++ b/templates/element/Packages/package-row.php
@@ -2,6 +2,7 @@
 /**
  * @var \App\View\IslandTemplateView $this
  * @var \App\Model\Entity\Package $package
+ * @var string|null $namespace
  */
 $summaries = [];
 foreach (['CakePHP' => $package->cake_php_tag_groups, 'PHP' => $package->php_tag_groups] as $label => $groups) {
@@ -10,7 +11,12 @@
         $summaries[] = $label . ' ' . implode(', ', $majors);
     }
 }
-$detailsUrl = $this->Url->build(['_name' => 'plugin:view', 'id' => $package->id]);
+[$packageNamespace, $packageName] = explode('/', $package->package, 2);
+$detailsUrl = $this->Url->build([
+    '_name' => 'plugin:view',
+    'namespace' => $packageNamespace,
+    'name' => $packageName,
+]);
 ?>
 <article class="package-row" id="package-<?= (int)$package->id ?>" data-package-row>
     <div class="min-w-0">
@@ -20,6 +26,15 @@
             </a>
         </h3>
         <p class="line-clamp-2 text-[0.9375rem] wrap-anywhere"><?= h($package->description ?: __('No description available.')) ?></p>
+        <?php if ($namespace !== $packageNamespace) : ?>
+            <?= $this->Html->link(__('More by {0}', $packageNamespace), [
+                '_name' => 'plugin:namespace',
+                'namespace' => $packageNamespace,
+            ], [
+                'class' => 'mt-1 inline-flex min-h-6 items-center text-xs text-muted hover:text-primary',
+                'x-interact:navigate' => '',
+            ]) ?>
+        <?php endif; ?>
         <?php if ($package->categories) : ?>
             <div class="mt-2 flex flex-wrap items-center gap-1.5">
                 <?= $this->element('Packages/awesome_badge', compact('package')) ?>
diff --git a/templates/element/Packages/plugin-details.php b/templates/element/Packages/plugin-details.php
index c319f0d3..9ee27689 100644
--- a/templates/element/Packages/plugin-details.php
+++ b/templates/element/Packages/plugin-details.php
@@ -14,7 +14,15 @@
 ?>
 <article class="plugin-details" id="plugin-details-<?= (int)$package->id ?>">
     <header class="plugin-details-heading">
-        <p class="mb-1 text-[0.9375rem] font-medium text-muted wrap-anywhere"><?= h($vendor) ?> /</p>
+        <p class="mb-1 text-[0.9375rem] font-medium text-muted wrap-anywhere">
+            <?= $this->Html->link($vendor, [
+                '_name' => 'plugin:namespace',
+                'namespace' => $vendor,
+            ], [
+                'aria-label' => __('View all plugins by {0}', $vendor),
+                'x-interact:navigate' => '',
+            ]) ?> /
+        </p>
         <h2><?= h($name ?: $vendor) ?></h2>
         <?= $this->element('Packages/awesome_badge', compact('package')) ?>
         <p class="mt-4 text-base leading-[1.7] text-base-content wrap-anywhere"><?= h($package->description ?: __('No description available.')) ?></p>
@@ -60,7 +68,12 @@
             <div class="plugin-category-links">
                 <?php foreach ($package->categories as $category) : ?>
                     <a class="category-label badge badge-outline"
-                       href="<?= $this->Url->build(['plugin' => null, 'controller' => 'Packages', 'action' => 'index', '?' => ['category' => $category->slug]]) ?>"
+                       href="<?= $this->Url->build([
+                           '_name' => 'plugin:index',
+                           '?' => [
+                               'category' => $category->slug,
+                           ],
+                       ]) ?>"
                        data-filter-package-category data-category-slug="<?= h($category->slug) ?>"><?= h($category->name) ?></a>
                 <?php endforeach; ?>
             </div>
@@ -101,7 +114,12 @@
                             <?php $version = str_replace($group['label'] . ': ', '', $tag->label); ?>
                             <a class="version-pill badge badge-outline"
                                aria-label="<?= h($group['label'] . ' ' . $version) ?>"
-                               href="<?= $this->Url->build(['controller' => 'Packages', 'action' => 'index', 'plugin' => null, '?' => [$group['query'] => [$tag->slug]]]) ?>"
+                               href="<?= $this->Url->build([
+                                   '_name' => 'plugin:index',
+                                   '?' => [
+                                       $group['query'] => [$tag->slug],
+                                   ],
+                               ]) ?>"
                                data-filter-package-version data-version-group="<?= h($group['query']) ?>" data-version-slug="<?= h($tag->slug) ?>">
                                 <?= h($version) ?>
                             </a>
diff --git a/templates/element/navbar.php b/templates/element/navbar.php
index 164e632a..b2b7dc2a 100644
--- a/templates/element/navbar.php
+++ b/templates/element/navbar.php
@@ -7,10 +7,24 @@
 
 $minimal = $minimal ?? false;
 $requirements = $this->getRequest()->getPath() === '/requirements';
+$publishers = $this->getRequest()->getPath() === '/publishers';
 $loggedIn = !$minimal && $this->Identity->isLoggedIn();
 $links = [
-    ['label' => __('Browse plugins'), 'url' => '/', 'active' => !$requirements],
-    ['label' => __('Listing requirements'), 'url' => '/requirements', 'active' => $requirements],
+    [
+        'label' => __('Browse plugins'),
+        'url' => '/',
+        'active' => !$requirements && !$publishers,
+    ],
+    [
+        'label' => __('Publishers'),
+        'url' => ['_name' => 'publisher:index'],
+        'active' => $publishers,
+    ],
+    [
+        'label' => __('Listing requirements'),
+        'url' => '/requirements',
+        'active' => $requirements,
+    ],
 ];
 $loginUrl = [
     'prefix' => false, 'plugin' => 'ADmad/SocialAuth', 'controller' => 'Auth', 'action' => 'login', 'provider' => 'github',
diff --git a/templates/island/catalogue.php b/templates/island/catalogue.php
index f712dea7..a4c468e9 100644
--- a/templates/island/catalogue.php
+++ b/templates/island/catalogue.php
@@ -13,6 +13,8 @@
  * @var array<string, array{name: string, count: int}> $categoryOptions
  * @var string $category
  * @var bool $awesomeOnly
+ * @var string|null $namespace
+ * @var array<string, mixed> $catalogueRoute
  */
 $sortLabels = [
     'latest_stable_release_date' => __('Latest release'),
@@ -20,24 +22,27 @@
     'stars' => __('Stars'),
 ];
 $sortLabel = $sortLabels[$catalogueQuery['sort']] ?? __('Latest release');
-$clearUrl = $this->Url->build([
-    'controller' => 'Packages', 'action' => 'index', 'plugin' => null,
-    '?' => ['sort' => $catalogueQuery['sort'], 'direction' => $catalogueQuery['direction']],
+$clearUrl = $this->Url->build($catalogueRoute + [
+    '?' => [
+        'sort' => $catalogueQuery['sort'],
+        'direction' => $catalogueQuery['direction'],
+    ],
 ]);
-$clearCategoryUrl = $this->Url->build([
-    'controller' => 'Packages', 'action' => 'index', 'plugin' => null,
+$clearCategoryUrl = $this->Url->build($catalogueRoute + [
     '?' => array_replace($catalogueQuery, ['category' => '']),
 ]);
 ?>
 <div class="directory pt-4 md:pt-5 site-width" x-data="catalogue" @click="activate($event)" @keydown.escape="closeMenu($event)"
      @catalogue-version.window="selectVersion($event)" @catalogue-category.window="selectCategory($event)">
-    <h1 class="sr-only"><?= __('CakePHP plugins') ?></h1>
+    <?php if ($namespace === null) : ?>
+        <h1 class="sr-only"><?= __('CakePHP plugins') ?></h1>
+    <?php endif; ?>
 
     <div class="catalogue-discovery">
         <div class="mb-4 flex items-center gap-3 md:gap-4">
             <?= $this->Form->create(null, [
                 'type' => 'get',
-                'url' => ['controller' => 'Packages', 'action' => 'index', 'plugin' => null],
+                'url' => $catalogueRoute,
                 'class' => 'min-w-0 flex-1',
                 'id' => 'catalogue-search-form',
                 'role' => 'search',
@@ -107,7 +112,7 @@
                             ?>
                             <a class="version-pill badge badge-outline" role="button" aria-pressed="<?= $selected ? 'true' : 'false' ?>"
                                aria-label="<?= h($filter['prefix'] . ' ' . $version) ?>"
-                               href="<?= $this->Url->build(['controller' => 'Packages', 'action' => 'index', 'plugin' => null, '?' => $filterQuery]) ?>"
+                               href="<?= $this->Url->build($catalogueRoute + ['?' => $filterQuery]) ?>"
                                @keydown.space.prevent="$el.click()"
                                data-version-group="<?= h($filter['name']) ?>" data-version-slug="<?= h($slug) ?>">
                                 <?= h($version) ?>
@@ -118,7 +123,7 @@
             <?php endforeach; ?>
         </div>
 
-        <?= $this->element('Packages/category_browser', compact('categoryOptions', 'category', 'catalogueQuery', 'clearCategoryUrl')) ?>
+        <?= $this->element('Packages/category_browser', compact('categoryOptions', 'category', 'catalogueQuery', 'clearCategoryUrl', 'catalogueRoute')) ?>
     </div>
 
     <?php if ($showFeatured) : ?>
@@ -140,7 +145,7 @@
             <div class="catalogue-controls">
                 <?php $awesomeQuery = array_replace($catalogueQuery, ['awesome' => $awesomeOnly ? '0' : '1']); ?>
                 <a class="curation-toggle btn btn-outline" role="button" aria-pressed="<?= $awesomeOnly ? 'true' : 'false' ?>"
-                   href="<?= $this->Url->build(['plugin' => null, 'controller' => 'Packages', 'action' => 'index', '?' => $awesomeQuery]) ?>"
+                   href="<?= $this->Url->build($catalogueRoute + ['?' => $awesomeQuery]) ?>"
                    data-toggle-awesome @keydown.space.prevent="$el.click()">
                     <?= $this->element('awesome_logo') ?>
                     <?= __('Awesome only') ?>
@@ -180,7 +185,7 @@
                 </div>
             <?php else : ?>
                 <?php foreach ($packages as $package) : ?>
-                    <?= $this->element('Packages/package-row', compact('package')) ?>
+                    <?= $this->element('Packages/package-row', compact('package', 'namespace')) ?>
                 <?php endforeach; ?>
             <?php endif; ?>
         </div>
diff --git a/templates/island/featured_plugins.php b/templates/island/featured_plugins.php
index cb11bbf4..7e4d67ca 100644
--- a/templates/island/featured_plugins.php
+++ b/templates/island/featured_plugins.php
@@ -21,7 +21,11 @@
                     $tone = ['rose', 'violet', 'amber'][hexdec(substr(hash('sha256', $package->package), 0, 4)) % 3];
                     ?>
                     <article class="featured-item group" data-plugin-tone="<?= $tone ?>">
-                        <a class="featured-card" href="<?= $this->Url->build(['_name' => 'plugin:view', 'id' => $package->id]) ?>"
+                        <a class="featured-card" href="<?= $this->Url->build([
+                            '_name' => 'plugin:view',
+                            'namespace' => $vendor,
+                            'name' => $name,
+                        ]) ?>"
                            aria-label="<?= __('View {0} details', h($package->package)) ?>"
                            data-open-plugin data-plugin-id="<?= (int)$package->id ?>" data-plugin-name="<?= h($package->package) ?>">
                             <?= $this->element('Packages/plugin-avatar', [
diff --git a/templates/island/namespace_profile.php b/templates/island/namespace_profile.php
new file mode 100644
index 00000000..c21eb329
--- /dev/null
+++ b/templates/island/namespace_profile.php
@@ -0,0 +1,16 @@
+<?php
+/**
+ * @var \App\View\IslandTemplateView $this
+ * @var string $namespace
+ * @var string $githubUrl
+ * @var array{avatarUrl: string|null, bio: string|null}|null $profile
+ */
+?>
+<div data-namespace-profile>
+    <?= $this->element('Namespaces/profile', [
+        'namespace' => $namespace,
+        'githubUrl' => $githubUrl,
+        'profile' => $profile,
+        'loading' => false,
+    ]) ?>
+</div>
diff --git a/templates/island/publishers.php b/templates/island/publishers.php
new file mode 100644
index 00000000..9bdcedf6
--- /dev/null
+++ b/templates/island/publishers.php
@@ -0,0 +1,199 @@
+<?php
+/**
+ * @var \App\View\IslandTemplateView $this
+ * @var \Cake\Datasource\Paging\PaginatedInterface<int, array<string, mixed>> $publishers
+ * @var array<string, array{githubUrl: string|null, avatarUrl: string|null, plugins: list<array{package: string, name: string}>}> $details
+ * @var array<string, string> $sortOptions
+ * @var array<string, string> $versionOptions
+ * @var string|null $selectedMajor
+ * @var string $search
+ * @var string $sort
+ * @var string $cakephp
+ * @var bool $showRanks
+ * @var int $rankStart
+ */
+$this->Form->setTemplates([
+    'input' => '<input type="{{type}}" name="{{name}}"{{attrs}}>',
+    'select' => '<select name="{{name}}"{{attrs}}>{{content}}</select>',
+    'button' => '<button{{attrs}}>{{text}}</button>',
+]);
+$clearQuery = [];
+if ($sort !== 'monthly_downloads') {
+    $clearQuery['sort'] = $sort;
+}
+if ($cakephp !== 'current') {
+    $clearQuery['cakephp'] = $cakephp;
+}
+$clearUrl = $this->Url->build([
+    '_name' => 'publisher:index',
+    '?' => $clearQuery,
+]);
+$statLabels = [
+    'plugins' => __('Plugins'),
+    ($sort === 'downloads' ? 'downloads' : 'monthly_downloads') => $sort === 'downloads' ? __('Lifetime downloads') : __('Monthly downloads'),
+    'stars' => __('Stars'),
+];
+?>
+<div class="publishers-directory site-width" x-data>
+    <?= $this->Form->create(null, [
+        'type' => 'get',
+        'url' => ['_name' => 'publisher:index'],
+        'class' => 'publisher-controls',
+        'role' => 'search',
+        'aria-label' => __('Find publishers'),
+        'x-interact:submit' => '$server.sync()',
+    ]) ?>
+        <label class="search-control input min-w-0 flex-1">
+            <span class="sr-only"><?= __('Search publishers') ?></span>
+            <?= $this->Form->search('search', [
+                'value' => $search,
+                'placeholder' => __('Search by namespace'),
+                'maxlength' => 100,
+                'autocomplete' => 'off',
+                'class' => 'w-full',
+                'aria-controls' => 'publisher-results',
+                'x-interact:model.live' => 'search',
+            ]) ?>
+            <span class="loading loading-spinner loading-sm shrink-0" role="status" aria-label="<?= __('Updating publishers') ?>"
+                  x-show="!$server.error && ($server.dirty || $server.pending())" x-cloak></span>
+        </label>
+        <label class="flex shrink-0 items-center gap-2 text-sm">
+            <span class="text-muted"><?= __('Version') ?></span>
+            <?= $this->Form->select('cakephp', $versionOptions, [
+                'value' => $cakephp,
+                'class' => 'select w-auto min-w-0 flex-1',
+                'aria-label' => __('CakePHP version'),
+                'x-interact:model.live' => 'cakephp',
+            ]) ?>
+        </label>
+        <label class="flex shrink-0 items-center gap-2 text-sm">
+            <span class="text-muted"><?= __('Rank by') ?></span>
+            <?= $this->Form->select('sort', $sortOptions, [
+                'value' => $sort,
+                'class' => 'select w-auto min-w-0 flex-1',
+                'aria-label' => __('Rank publishers by'),
+                'x-interact:model.live' => 'sort',
+            ]) ?>
+        </label>
+        <noscript><?= $this->Form->button(__('Apply'), [
+            'class' => 'btn btn-primary',
+        ]) ?></noscript>
+        <?php if (trim($search) !== '') : ?>
+            <a class="text-sm text-muted" href="<?= h($clearUrl) ?>" @click.prevent="$server.call('clearSearch')"><?= __('Clear search') ?></a>
+        <?php endif; ?>
+    <?= $this->Form->end() ?>
+
+    <p class="mb-4 text-sm text-muted" data-publisher-scope>
+        <?= $selectedMajor !== null
+            ? __('Counts and rankings include plugins compatible with CakePHP {0}.', h($selectedMajor))
+            : __('Counts and rankings include plugins for all CakePHP versions.') ?>
+        <?= __('Monthly downloads cover all releases of those packages. Missing figures appear after the next package sync.') ?>
+    </p>
+    <section class="overflow-hidden rounded-2xl border border-base-300 bg-base-100" aria-label="<?= __('Publisher rankings') ?>">
+        <div class="catalogue-error" role="alert" x-show="$server.error" x-cloak>
+            <p><?= __('We couldn’t update the publishers. Please try again.') ?></p>
+            <?= $this->Form->button(__('Retry'), [
+                'type' => 'button',
+                'class' => 'action-link btn btn-outline',
+                '@click' => '$server.sync()',
+                ':disabled' => '$server.pending()',
+            ]) ?>
+        </div>
+        <div id="publisher-results" :aria-busy="!$server.error && ($server.dirty || $server.pending()) ? 'true' : 'false'">
+            <?php if (count($publishers) === 0) : ?>
+                <div class="empty-results">
+                    <h2><?= __('No publishers found') ?></h2>
+                    <p><?= __('Try another namespace or clear your search.') ?></p>
+                    <a class="action-link btn btn-outline" href="<?= h($clearUrl) ?>" @click.prevent="$server.call('clearSearch')"><?= __('Clear search') ?></a>
+                </div>
+            <?php else : ?>
+                <ol aria-label="<?= __('Publishers') ?>">
+                    <?php foreach ($publishers as $publisher) : ?>
+                        <?php
+                        $namespace = $publisher['namespace'];
+                        $detail = $details[$namespace];
+                        ?>
+                        <li class="publisher-row" data-publisher-namespace="<?= h($namespace) ?>">
+                            <div class="flex min-w-0 items-start gap-3 md:gap-4">
+                                <div class="avatar avatar-placeholder relative shrink-0" x-data="{ failed: false }">
+                                    <div class="publisher-avatar" aria-hidden="true">
+                                        <span><?= h(mb_strtoupper(mb_substr($namespace, 0, 2))) ?></span>
+                                        <?php if ($detail['avatarUrl'] !== null) : ?>
+                                            <?= $this->Html->image($detail['avatarUrl'], [
+                                                'alt' => '',
+                                                'width' => 64,
+                                                'height' => 64,
+                                                'loading' => 'lazy',
+                                                'decoding' => 'async',
+                                                'referrerpolicy' => 'no-referrer',
+                                                'x-show' => '!failed',
+                                                '@error' => 'failed = true',
+                                                'x-init' => 'failed = $el.complete && $el.naturalWidth === 0',
+                                                'data-publisher-avatar' => '',
+                                            ]) ?>
+                                        <?php endif; ?>
+                                    </div>
+                                    <?php if ($showRanks) : ?>
+                                        <span class="publisher-rank badge badge-sm" data-publisher-rank aria-label="<?= __('Rank {0}', $rankStart) ?>">#<?= $rankStart++ ?></span>
+                                    <?php endif; ?>
+                                </div>
+                                <div class="min-w-0">
+                                    <h2 class="publisher-name">
+                                        <?= $this->Html->link($namespace, [
+                                            '_name' => 'plugin:namespace',
+                                            'namespace' => $namespace,
+                                        ], ['x-interact:navigate' => '']) ?>
+                                    </h2>
+                                    <p class="mt-2 text-xs text-muted"><?= __('Popular plugins') ?></p>
+                                    <ul class="mt-1.5 flex flex-wrap gap-1.5" aria-label="<?= __('Popular plugins by {0}', $namespace) ?>">
+                                        <?php foreach ($detail['plugins'] as $plugin) : ?>
+                                            <li class="min-w-0">
+                                                <?= $this->Html->link($plugin['name'], [
+                                                    '_name' => 'plugin:view',
+                                                    'namespace' => $namespace,
+                                                    'name' => $plugin['name'],
+                                                ], [
+                                                    'class' => 'publisher-plugin badge badge-sm badge-soft',
+                                                    'aria-label' => __('View {0} details', $plugin['package']),
+                                                    'x-interact:navigate' => '',
+                                                ]) ?>
+                                            </li>
+                                        <?php endforeach; ?>
+                                    </ul>
+                                    <?php if ($publisher['latest_release'] !== null) : ?>
+                                        <p class="mt-2 text-xs text-muted">
+                                            <?= __('Latest release') ?>
+                                            <time datetime="<?= h($publisher['latest_release']) ?>"><?= h($this->Time->format($publisher['latest_release'], 'MMM d, yyyy')) ?></time>
+                                        </p>
+                                    <?php endif; ?>
+                                </div>
+                            </div>
+                            <dl class="publisher-statistics">
+                                <?php foreach ($statLabels as $key => $label) : ?>
+                                    <div class="min-w-0">
+                                        <dt class="text-xs text-muted"><?= h($label) ?></dt>
+                                        <dd class="mt-1 text-lg font-semibold tabular-nums" data-publisher-stat="<?= h($key) ?>"
+                                            title="<?= $publisher[$key] !== null ? h($this->Number->format($publisher[$key])) : __('Awaiting package sync') ?>"
+                                            aria-label="<?= $publisher[$key] !== null ? h($this->Number->format($publisher[$key])) : __('Awaiting package sync') ?>">
+                                            <?= $publisher[$key] !== null ? h($this->Number->compact((int)$publisher[$key])) : '—' ?>
+                                        </dd>
+                                    </div>
+                                <?php endforeach; ?>
+                            </dl>
+                        </li>
+                    <?php endforeach; ?>
+                </ol>
+            <?php endif; ?>
+        </div>
+        <?php if (count($publishers) > 0) : ?>
+            <div class="catalogue-pagination">
+                <p><?= $this->Paginator->counter(__('Showing {{start}}–{{end}} of {{count}} publishers')) ?></p>
+                <nav class="flex flex-wrap items-center gap-1.5" aria-label="<?= __('Publisher pages') ?>">
+                    <?= $this->Paginator->prev(__('Previous')) ?>
+                    <?= $this->Paginator->numbers(['modulus' => 2]) ?>
+                    <?= $this->Paginator->next(__('Next')) ?>
+                </nav>
+            </div>
+        <?php endif; ?>
+    </section>
+</div>
diff --git a/templates/layout/default.php b/templates/layout/default.php
index 7cc41d16..ee2b9884 100644
--- a/templates/layout/default.php
+++ b/templates/layout/default.php
@@ -17,7 +17,7 @@
 $cakeDescription = 'CakePHP Plugins';
 $request = $this->getRequest();
 $theme = $request->getCookie('theme') === 'cakephp-dark' ? 'cakephp-dark' : 'cakephp';
-$canonicalUrl = $this->Url->build($request->getPath() ?: '/', ['fullBase' => true]);
+$canonicalUrl = $this->fetch('canonicalUrl') ?: $this->Url->build($request->getPath() ?: '/', ['fullBase' => true]);
 ?>
 <!DOCTYPE html>
 <html data-theme="<?= h($theme) ?>">
diff --git a/tests/Fixture/PackagesFixture.php b/tests/Fixture/PackagesFixture.php
index dda787d9..42c28bce 100644
--- a/tests/Fixture/PackagesFixture.php
+++ b/tests/Fixture/PackagesFixture.php
@@ -64,6 +64,17 @@ public function init(): void
             ];
         }
 
+        foreach ($this->records as &$record) {
+            $record['namespace'] = strtolower(explode('/', $record['package'], 2)[0]);
+            $record['monthly_downloads'] = match ($record['id']) {
+                1 => 150,
+                25 => 1200,
+                26 => 2000,
+                default => 100 - $record['id'],
+            };
+        }
+        unset($record);
+
         parent::init();
     }
 }
diff --git a/tests/Fixture/PublisherTaggedFixture.php b/tests/Fixture/PublisherTaggedFixture.php
new file mode 100644
index 00000000..b6996da0
--- /dev/null
+++ b/tests/Fixture/PublisherTaggedFixture.php
@@ -0,0 +1,41 @@
+<?php
+declare(strict_types=1);
+
+namespace App\Test\Fixture;
+
+use Cake\TestSuite\Fixture\TestFixture;
+use Override;
+
+/**
+ * CakeDC targets the older major while the other fixture publishers support the current one.
+ */
+class PublisherTaggedFixture extends TestFixture
+{
+    #[Override]
+    public string $table = 'tags_tagged';
+
+    /**
+     * Model-scoped membership also guards against unrelated tag associations.
+     */
+    public function init(): void
+    {
+        $this->records = [];
+        for ($id = 1; $id <= 26; $id++) {
+            $this->records[] = [
+                'tag_id' => $id === 25 ? 3 : 1,
+                'fk_id' => $id,
+                'fk_model' => 'Packages',
+                'created' => '2026-01-01 00:00:00',
+                'modified' => '2026-01-01 00:00:00',
+            ];
+        }
+        $this->records[] = [
+            'tag_id' => 2,
+            'fk_id' => 1,
+            'fk_model' => 'Packages',
+            'created' => '2026-01-01 00:00:00',
+            'modified' => '2026-01-01 00:00:00',
+        ];
+        parent::init();
+    }
+}
diff --git a/tests/Fixture/PublisherVersionsFixture.php b/tests/Fixture/PublisherVersionsFixture.php
new file mode 100644
index 00000000..86fc3d91
--- /dev/null
+++ b/tests/Fixture/PublisherVersionsFixture.php
@@ -0,0 +1,34 @@
+<?php
+declare(strict_types=1);
+
+namespace App\Test\Fixture;
+
+use Cake\TestSuite\Fixture\TestFixture;
+use Override;
+
+/**
+ * Multiple minor tags in a major must not duplicate publisher totals.
+ */
+class PublisherVersionsFixture extends TestFixture
+{
+    #[Override]
+    public string $table = 'tags_tags';
+
+    /**
+     * Seed the same compatibility vocabulary used by the browser catalogue.
+     */
+    public function init(): void
+    {
+        $this->records = [];
+        foreach ([1 => ['cakephp-5-4', 'CakePHP: 5.4'], 2 => ['cakephp-5-3', 'CakePHP: 5.3'], 3 => ['cakephp-4-4', 'CakePHP: 4.4']] as $id => [$slug, $label]) {
+            $this->records[] = [
+                'id' => $id,
+                'slug' => $slug,
+                'label' => $label,
+                'created' => '2026-01-01 00:00:00',
+                'modified' => '2026-01-01 00:00:00',
+            ];
+        }
+        parent::init();
+    }
+}
diff --git a/tests/TestCase/ApplicationServicesTest.php b/tests/TestCase/ApplicationServicesTest.php
new file mode 100644
index 00000000..736ce063
--- /dev/null
+++ b/tests/TestCase/ApplicationServicesTest.php
@@ -0,0 +1,113 @@
+<?php
+declare(strict_types=1);
+
+namespace App\Test\TestCase;
+
+use App\Application;
+use App\Command\SyncPackagesCommand;
+use App\Event\AfterGithubIdentify;
+use App\Island\NamespaceProfileIsland;
+use App\Island\PublishersIsland;
+use App\Model\Table\PackagesTable;
+use App\Service\AwesomeListImporter;
+use App\Service\GithubProfileService;
+use App\Service\PackagistImporter;
+use Cake\Core\Configure;
+use Cake\Core\Container;
+use Cake\Http\Client;
+use Cake\Http\Client\Response;
+use Cake\TestSuite\TestCase;
+use Interact\Container\Services;
+use PHPUnit\Framework\Attributes\DataProvider;
+
+/**
+ * Autowiring preserves configured dependencies and fresh island state.
+ */
+class ApplicationServicesTest extends TestCase
+{
+    /**
+     * Resolve the import command's complete graph without making remote requests.
+     */
+    public function testAutowiringResolvesApplicationServices(): void
+    {
+        $container = new Container();
+        new Application(dirname(__DIR__, 2) . '/config')->services($container);
+        $this->assertSame($this->fetchTable(PackagesTable::class), $container->get(PackagesTable::class));
+        $this->assertInstanceOf(PackagistImporter::class, $container->get(PackagistImporter::class));
+        $this->assertInstanceOf(AwesomeListImporter::class, $container->get(AwesomeListImporter::class));
+        $this->assertInstanceOf(SyncPackagesCommand::class, $container->get(SyncPackagesCommand::class));
+        $this->assertInstanceOf(AfterGithubIdentify::class, $container->get(AfterGithubIdentify::class));
+    }
+
+    /**
+     * Autowired services still receive explicit HTTP overrides and scalar configuration.
+     */
+    public function testAutowiringRespectsConfiguredDependencies(): void
+    {
+        Configure::write('GitHub.apiToken', 'application-test-token');
+        $container = new Container();
+        new Application(dirname(__DIR__, 2) . '/config')->services($container);
+        $client = $this->createMock(Client::class);
+        $client->expects($this->once())->method('get')->with(
+            'https://api.github.com/users/autowiring-example',
+            [],
+            $this->callback(static fn(array $options): bool => $options['headers']['Authorization'] === 'Bearer application-test-token'),
+        )->willReturn(new Response(
+            ['HTTP/1.1 200 OK', 'Content-Type: application/json'],
+            '{"login":"autowiring-example","bio":"Configured dependencies"}',
+        ));
+        $container->addShared(Client::class, $client, true);
+        $profile = $container->get(GithubProfileService::class)->profile('autowiring-example');
+        $this->assertSame('Configured dependencies', $profile['bio']);
+    }
+
+    /**
+     * Production reuses autowired services while development disables the cache.
+     */
+    #[DataProvider('debugModes')]
+    public function testAutowiringCachesServicesInProduction(bool $debug): void
+    {
+        Configure::write('debug', $debug);
+        $container = new Container();
+        new Application(dirname(__DIR__, 2) . '/config')->services($container);
+        $profile = $container->get(GithubProfileService::class);
+        $otherProfile = $container->get(GithubProfileService::class);
+        if ($debug) {
+            $this->assertNotSame($profile, $otherProfile);
+        } else {
+            $this->assertSame($profile, $otherProfile);
+        }
+    }
+
+    /**
+     * Interact must never reuse mutable state between island constructions.
+     */
+    #[DataProvider('debugModes')]
+    public function testIslandsRemainFresh(bool $debug): void
+    {
+        Configure::write('debug', $debug);
+        $container = new Container();
+        new Application(dirname(__DIR__, 2) . '/config')->services($container);
+        $publishers = Services::fresh($container, PublishersIsland::class);
+        $publishers->search = 'vendor';
+        $otherPublishers = Services::fresh($container, PublishersIsland::class);
+        $this->assertNotSame($publishers, $otherPublishers);
+        $this->assertSame('', $otherPublishers->search);
+        $profile = Services::fresh($container, NamespaceProfileIsland::class);
+        $profile->namespace = 'vendor';
+        $otherProfile = Services::fresh($container, NamespaceProfileIsland::class);
+        $this->assertNotSame($profile, $otherProfile);
+        $this->assertSame('', $otherProfile->namespace);
+    }
+
+    /**
+     * @return array<string, array{bool}>
+     */
+    public static function debugModes(): array
+    {
+        return [
+            'development' => [true],
+            'production' => [false],
+        ];
+    }
+}
diff --git a/tests/TestCase/ApplicationTest.php b/tests/TestCase/ApplicationTest.php
index 6b216614..72ec7cb9 100644
--- a/tests/TestCase/ApplicationTest.php
+++ b/tests/TestCase/ApplicationTest.php
@@ -130,7 +130,12 @@ public function testRateLimitProfiles(): void
         $requests = [
             ['/', 'GET', [], 90],
             ['/', 'GET', ['search' => 'users'], 15],
-            ['/plugins/1', 'GET', [], 90],
+            ['/publishers', 'GET', [], 90],
+            ['/publishers', 'GET', ['sort' => 'stars'], 15],
+            ['/plugins/markstory/asset_compress', 'GET', [], 90],
+            ['/plugins/vendor.name/plugin_name.json', 'GET', [], 90],
+            ['/plugins/dereuromark', 'GET', [], 90],
+            ['/plugins/dereuromark', 'GET', ['search' => 'tools'], 15],
             ['/_interact/update', 'POST', [], 30],
         ];
         foreach ($requests as [$path, $method, $query, $limit]) {
diff --git a/tests/TestCase/Controller/PackagesControllerTest.php b/tests/TestCase/Controller/PackagesControllerTest.php
index df33d2f7..8783f7bd 100644
--- a/tests/TestCase/Controller/PackagesControllerTest.php
+++ b/tests/TestCase/Controller/PackagesControllerTest.php
@@ -3,9 +3,13 @@
 
 namespace App\Test\TestCase\Controller;
 
+use App\Model\Table\PackagesTable;
+use App\Service\GithubProfileService;
+use Cake\Routing\Router;
 use Cake\TestSuite\IntegrationTestTrait;
 use Cake\TestSuite\TestCase;
 use Override;
+use PHPUnit\Framework\Attributes\DataProvider;
 
 /**
  * App\Controller\PackagesController Test Case
@@ -24,6 +28,7 @@ class PackagesControllerTest extends TestCase
     #[Override]
     protected array $fixtures = [
         'app.FeaturedPlugins', 'app.Packages',
+        'app.Categories', 'app.CategoriesPackages',
         'plugin.Tags.Tags',
         'plugin.Tags.Tagged',
     ];
@@ -87,10 +92,89 @@ public function testAutocompleteEndpointIsRemoved(): void
      */
     public function testPublicPluginDetails(): void
     {
-        $this->get('/plugins/1');
+        $this->get('/plugins/markstory/asset_compress');
         $this->assertResponseOk();
         $this->assertResponseContains('composer require markstory/asset_compress');
         $this->assertResponseContains('https://packagist.org/packages/markstory/asset_compress');
+        $this->assertResponseContains('href="/plugins/markstory"');
+        $this->assertResponseContains('rel="canonical" href="' . Router::url([
+            '_name' => 'plugin:view',
+            'namespace' => 'markstory',
+            'name' => 'asset_compress',
+        ], true) . '"');
+    }
+
+    /**
+     * Composer punctuation remains literal, including names ending in a response extension.
+     */
+    public function testPackageRoutePreservesDotsAndUnderscores(): void
+    {
+        $packages = $this->fetchTable(PackagesTable::class);
+        $package = $packages->patchEntity($packages->get(2), [
+            'package' => 'vendor.name/plugin_name.json',
+        ]);
+        $packages->saveOrFail($package);
+        $this->get('/plugins/vendor.name/plugin_name.json');
+        $this->assertResponseOk();
+        $this->assertNoRedirect();
+        $this->assertResponseContains('composer require vendor.name/plugin_name.json');
+        $this->assertResponseContains('rel="canonical" href="' . Router::url([
+            '_name' => 'plugin:view',
+            'namespace' => 'vendor.name',
+            'name' => 'plugin_name.json',
+        ], true) . '"');
+    }
+
+    /**
+     * Detail lookups use the complete package name and expose its stored lowercase canonical URL.
+     */
+    public function testPackageLookupAndCanonicalUrl(): void
+    {
+        $this->get('/plugins/MARKSTORY/ASSET_COMPRESS');
+        $this->assertResponseOk();
+        $this->assertNoRedirect();
+        $this->assertResponseContains('rel="canonical" href="' . Router::url([
+            '_name' => 'plugin:view',
+            'namespace' => 'markstory',
+            'name' => 'asset_compress',
+        ], true) . '"');
+        foreach (['/plugins/markstory/asset-compress', '/plugins/another-vendor/asset_compress'] as $path) {
+            $this->get($path);
+            $this->assertResponseCode(404);
+        }
+    }
+
+    /**
+     * The hierarchy does not reserve "by" or numeric namespaces for the removed routes.
+     */
+    public function testPackageHierarchyHasNoReservedNamespacePrefixes(): void
+    {
+        $packages = $this->fetchTable(PackagesTable::class);
+        foreach (['by', '123'] as $namespace) {
+            $package = $packages->patchEntity($packages->get(2), [
+                'package' => $namespace . '/cakephp-tools',
+            ]);
+            $packages->saveOrFail($package);
+            $this->get('/plugins/' . $namespace);
+            $this->assertResponseOk();
+            $this->assertNoRedirect();
+            $this->assertResponseContains('href="/plugins/' . $namespace . '/cakephp-tools"');
+            $this->get('/plugins/' . $namespace . '/cakephp-tools');
+            $this->assertResponseOk();
+            $this->assertNoRedirect();
+        }
+    }
+
+    /**
+     * Old public routes are removed without compatibility redirects.
+     */
+    public function testOldPublicUrlsAreNotRedirected(): void
+    {
+        foreach (['/plugins/1', '/plugins/by/dereuromark'] as $path) {
+            $this->get($path);
+            $this->assertResponseCode(404);
+            $this->assertNoRedirect();
+        }
     }
 
     /**
@@ -98,10 +182,93 @@ public function testPublicPluginDetails(): void
      */
     public function testMissingPluginDetails(): void
     {
-        $this->get('/plugins/99999');
+        $this->get('/plugins/missing/package');
+        $this->assertResponseCode(404);
+    }
+
+    /**
+     * Namespace pages are public, scoped, and expose totals unaffected by filters.
+     */
+    public function testNamespacePage(): void
+    {
+        $service = $this->createMock(GithubProfileService::class);
+        $service->expects($this->never())->method('profile');
+        $this->mockService(GithubProfileService::class, static fn(): GithubProfileService => $service);
+        $this->get('/plugins/dereuromark?search=no-match');
+        $this->assertResponseOk();
+        $this->assertResponseContains('Plugins by dereuromark');
+        $this->assertResponseContains('href="https://github.com/dereuromark"');
+        $this->assertResponseContains('href="https://packagist.org/packages/dereuromark/"');
+        $this->assertResponseContains('data-namespace-stat="downloads">20k');
+        $this->assertResponseContains('data-namespace-stat="stars">300');
+        $this->assertResponseContains('No plugins found');
+        $this->assertResponseContains('action="/plugins/dereuromark"');
+        $this->assertResponseContains('data-namespace-profile-loading');
+        $this->assertResponseContains('skeleton');
+        $this->assertResponseContains('rel="canonical" href="' . Router::url([
+            '_name' => 'plugin:namespace',
+            'namespace' => 'dereuromark',
+        ], true) . '"');
+        $this->assertResponseNotContains('data-featured-plugins');
+        $this->assertResponseNotContains('markstory/asset_compress');
+    }
+
+    /**
+     * Canonical casing retains query strings, while unknown namespaces return 404.
+     */
+    public function testNamespaceCanonicalUrlAndMissingNamespace(): void
+    {
+        $this->get('/plugins/Dereuromark?search=tools&sort=stars');
+        $this->assertResponseCode(301);
+        $this->assertRedirect('/plugins/dereuromark?search=tools&sort=stars');
+        $this->get('/plugins/not-a-namespace');
         $this->assertResponseCode(404);
     }
 
+    /**
+     * Return to local referring pages with their filters; direct visits keep a catalogue fallback.
+     */
+    #[DataProvider('namespaceReferrers')]
+    public function testNamespaceBackLink(?string $referrer, string $expected): void
+    {
+        if ($referrer !== null) {
+            $this->configRequest([
+                'environment' => [
+                    'HTTP_REFERER' => str_starts_with($referrer, '/') ? Router::url($referrer, true) : $referrer,
+                ],
+            ]);
+        }
+        $this->get('/plugins/vendor');
+        $this->assertResponseOk();
+        $this->assertResponseRegExp('/<a[^>]+href="' . preg_quote(h($expected), '/') . '"[^>]*>← Back<\/a>/');
+    }
+
+    /**
+     * @return array<string, array{string|null, string}>
+     */
+    public static function namespaceReferrers(): array
+    {
+        return [
+            'publisher overview' => ['/publishers?search=vendor&sort=stars&cakephp=all', '/publishers?search=vendor&sort=stars&cakephp=all'],
+            'filtered catalogue' => ['/?search=tools&sort=downloads', '/?search=tools&sort=downloads'],
+            'direct visit' => [null, '/'],
+            'external visit' => ['https://example.com/publishers', '/'],
+            'self reference' => ['/plugins/vendor?sort=downloads', '/'],
+        ];
+    }
+
+    /**
+     * A namespace spanning different GitHub owners must not advertise an inferred profile.
+     */
+    public function testNamespaceOmitsAmbiguousGithubProfile(): void
+    {
+        $this->fetchTable(PackagesTable::class)->updateAll(['repo_url' => 'https://github.com/another-owner/plugin'], ['id' => 2]);
+        $this->get('/plugins/vendor');
+        $this->assertResponseOk();
+        $this->assertResponseNotContains('GitHub profile');
+        $this->assertResponseContains('href="https://packagist.org/packages/vendor/"');
+    }
+
     /**
      * Public catalogue documents provide the runtime and navigation metadata.
      */
diff --git a/tests/TestCase/Controller/PublishersControllerTest.php b/tests/TestCase/Controller/PublishersControllerTest.php
new file mode 100644
index 00000000..38b86e63
--- /dev/null
+++ b/tests/TestCase/Controller/PublishersControllerTest.php
@@ -0,0 +1,90 @@
+<?php
+declare(strict_types=1);
+
+namespace App\Test\TestCase\Controller;
+
+use App\Model\Table\PackagesTable;
+use App\Service\GithubApiService;
+use Cake\Cache\Cache;
+use Cake\TestSuite\IntegrationTestTrait;
+use Cake\TestSuite\TestCase;
+use Override;
+
+/**
+ * The public directory renders without requesting GitHub metadata.
+ */
+class PublishersControllerTest extends TestCase
+{
+    use IntegrationTestTrait;
+
+    /**
+     * @var list<string>
+     */
+    #[Override]
+    protected array $fixtures = ['app.Packages', 'app.PublisherVersions', 'app.PublisherTagged'];
+
+    /**
+     * Version options must reflect this test's compatibility fixtures.
+     */
+    protected function setUp(): void
+    {
+        parent::setUp();
+        Cache::delete('package_filter_tags_v1');
+    }
+
+    /**
+     * The first response includes rankings, avatar URLs, and canonical detail links.
+     */
+    public function testPublicDirectory(): void
+    {
+        $github = $this->createMock(GithubApiService::class);
+        $github->expects($this->never())->method('get');
+        $this->mockService(GithubApiService::class, static fn(): GithubApiService => $github);
+        $this->get('/publishers');
+        $this->assertResponseOk();
+        $this->assertResponseContains('data-publisher-namespace="vendor"');
+        $this->assertResponseContains('href="/plugins/vendor"');
+        $this->assertResponseContains('href="/plugins/vendor/package-01"');
+        $this->assertResponseContains('https://github.com/vendor.png?size=96');
+        $this->assertResponseContains('action="/publishers"');
+        $this->assertResponseContains('data-publisher-rank');
+        $this->assertResponseNotContains('data-publisher-namespace="cakedc"');
+        $this->assertResponseContains('Monthly downloads');
+        $this->assertResponseContains('Latest release');
+    }
+
+    /**
+     * Native GET search and invalid sorting remain usable without JavaScript.
+     */
+    public function testSearchAndSortFallback(): void
+    {
+        $this->get('/publishers?search=MARK&sort=invalid');
+        $this->assertResponseOk();
+        $this->assertResponseContains('data-publisher-namespace="markstory"');
+        $this->assertResponseContains('data-publisher-namespace="dereuromark"');
+        $this->assertResponseNotContains('data-publisher-namespace="vendor"');
+        $this->assertResponseNotContains('data-publisher-rank');
+        $this->get('/publishers?search=no-such-publisher');
+        $this->assertResponseOk();
+        $this->assertResponseContains('No publishers found');
+    }
+
+    /**
+     * Older compatible publishers are discoverable through explicit version selection.
+     */
+    public function testVersionSelectionAndMissingMonthlyData(): void
+    {
+        $this->get('/publishers?cakephp=4');
+        $this->assertResponseOk();
+        $this->assertResponseContains('data-publisher-namespace="cakedc"');
+        $this->assertResponseNotContains('data-publisher-namespace="vendor"');
+        $this->get('/publishers?cakephp=all');
+        $this->assertResponseContains('data-publisher-namespace="cakedc"');
+        $this->assertResponseContains('data-publisher-namespace="vendor"');
+        $this->fetchTable(PackagesTable::class)->updateAll(['monthly_downloads' => null], ['id' => 1]);
+        $this->get('/publishers?search=markstory&cakephp=invalid');
+        $this->assertResponseOk();
+        $this->assertResponseContains('Counts and rankings include plugins compatible with CakePHP 5.');
+        $this->assertResponseContains('Awaiting package sync');
+    }
+}
diff --git a/tests/TestCase/Event/AfterGithubIdentifyTest.php b/tests/TestCase/Event/AfterGithubIdentifyTest.php
index dc24dcd7..11e51010 100644
--- a/tests/TestCase/Event/AfterGithubIdentifyTest.php
+++ b/tests/TestCase/Event/AfterGithubIdentifyTest.php
@@ -8,7 +8,9 @@
 use App\Event\AfterGithubIdentify;
 use App\Model\Enum\UserRole;
 use App\Model\Table\UsersTable;
+use App\Service\GithubApiService;
 use Cake\Event\Event;
+use Cake\Http\Client;
 use Cake\Http\TestSuite\HttpClientTrait;
 use Cake\TestSuite\TestCase;
 use Override;
@@ -48,7 +50,7 @@ public function testSynchronizesMembership(
             $this->newClientResponse($status, ['Content-Type: application/json'], $body),
         );
 
-        $listener = new AfterGithubIdentify();
+        $listener = new AfterGithubIdentify(new GithubApiService(new Client()));
         $listener->setTableLocator($this->getTableLocator());
         $listener->afterIdentify(new Event(SocialAuthMiddleware::EVENT_AFTER_IDENTIFY), $user);
 
diff --git a/tests/TestCase/Island/CatalogueIslandTest.php b/tests/TestCase/Island/CatalogueIslandTest.php
index 244c9c61..8afb4bc9 100644
--- a/tests/TestCase/Island/CatalogueIslandTest.php
+++ b/tests/TestCase/Island/CatalogueIslandTest.php
@@ -8,6 +8,7 @@
 use Cake\Http\ServerRequest;
 use Cake\TestSuite\TestCase;
 use Interact\TestSuite\IslandTestTrait;
+use InvalidArgumentException;
 use Override;
 use Tags\Model\Table\TaggedTable;
 use Tags\Model\Table\TagsTable;
@@ -57,6 +58,52 @@ public function testUnknownCategoryIsCleared(): void
         $this->testIsland('Catalogue')->call('selectCategory', 'not-a-category')->assertSet('category', '');
     }
 
+    /**
+     * Paging, filtering and resetting retain the server-owned namespace scope.
+     */
+    public function testNamespaceScopeSurvivesUpdates(): void
+    {
+        $request = new ServerRequest(['url' => 'http://localhost/plugins/vendor']);
+        $island = $this->testIsland('Catalogue', ['namespace' => 'vendor'], request: $request)
+            ->assertDontSee('data-featured-plugins')
+            ->assertDontSee('markstory/asset_compress')
+            ->set('paging.page', 2)
+            ->assertSet('paging.page', 2)
+            ->set('search', 'package-01')
+            ->assertSet('paging.page', 1)
+            ->assertSee('vendor/package-01')
+            ->assertDontSee('vendor/package-02')
+            ->call('clearFilters')
+            ->assertSet('namespace', 'vendor')
+            ->assertDontSee('data-featured-plugins')
+            ->assertDontSee('markstory/asset_compress');
+        $this->assertStringContainsString('/plugins/vendor?', $island->result()->html);
+        $this->assertStringNotContainsString('/_interact/update?', $island->result()->html);
+    }
+
+    /**
+     * Namespaced category choices exclude unrelated categories and remain stable while searching.
+     */
+    public function testNamespaceCategoryChoices(): void
+    {
+        $this->testIsland('Catalogue', ['namespace' => 'markstory'])
+            ->assertSee('Asset Management')
+            ->assertDontSee('Authentication & Authorization')
+            ->set('search', 'no-match')
+            ->assertSee('Asset Management')
+            ->assertSee('No plugins found');
+    }
+
+    /**
+     * Browser updates cannot replace the namespace supplied by the hosting page.
+     */
+    public function testNamespaceCannotBeChangedByUpdates(): void
+    {
+        $island = $this->testIsland('Catalogue', ['namespace' => 'vendor']);
+        $this->expectException(InvalidArgumentException::class);
+        $island->set('namespace', 'cakedc');
+    }
+
     /**
      * Keep featured selection and cached options deterministic.
      */
diff --git a/tests/TestCase/Island/NamespaceProfileIslandTest.php b/tests/TestCase/Island/NamespaceProfileIslandTest.php
new file mode 100644
index 00000000..ffd809ea
--- /dev/null
+++ b/tests/TestCase/Island/NamespaceProfileIslandTest.php
@@ -0,0 +1,67 @@
+<?php
+declare(strict_types=1);
+
+namespace App\Test\TestCase\Island;
+
+use App\Service\GithubProfileService;
+use Cake\TestSuite\TestCase;
+use Interact\TestSuite\IslandTestTrait;
+
+/**
+ * Public profile enrichment uses signed props and escaped presentation.
+ */
+class NamespaceProfileIslandTest extends TestCase
+{
+    use IslandTestTrait;
+
+    /**
+     * Composer namespace and GitHub owner can differ.
+     */
+    public function testProfileUsesRepositoryOwnerAndEscapesBio(): void
+    {
+        $service = $this->createMock(GithubProfileService::class);
+        $service->expects($this->once())->method('profile')->with('github-owner')->willReturn([
+            'avatarUrl' => 'https://avatars.githubusercontent.com/u/123',
+            'bio' => '<script>Example</script>',
+        ]);
+        $this->mockService(GithubProfileService::class, static fn(): GithubProfileService => $service);
+        $island = $this->testIsland('NamespaceProfile', [
+            'namespace' => 'composer-vendor',
+            'githubUrl' => 'https://github.com/github-owner',
+        ])->assertSee('composer-vendor')->assertSee('<script>Example</script>')->assertSee('https://avatars.githubusercontent.com/u/123');
+        $this->assertStringNotContainsString('<script>Example</script>', $island->result()->html);
+        $this->assertStringNotContainsString('skeleton', $island->result()->html);
+    }
+
+    /**
+     * Unavailable enrichment renders initials and the same generic description.
+     */
+    public function testUnavailableProfileKeepsIdentityAndDescription(): void
+    {
+        $service = $this->createStub(GithubProfileService::class);
+        $service->method('profile')->willReturn(null);
+        $this->mockService(GithubProfileService::class, static fn(): GithubProfileService => $service);
+        $this->testIsland('NamespaceProfile', [
+            'namespace' => 'example',
+            'githubUrl' => 'https://github.com/example',
+        ])->assertSee('EX')
+            ->assertSee('Plugins for your CakePHP projects.')->assertDontSee('data-namespace-avatar');
+    }
+
+    /**
+     * Accounts with an avatar but no bio get the generic description.
+     */
+    public function testMissingBioUsesFallback(): void
+    {
+        $service = $this->createStub(GithubProfileService::class);
+        $service->method('profile')->willReturn([
+            'avatarUrl' => 'https://avatars.githubusercontent.com/u/123',
+            'bio' => null,
+        ]);
+        $this->mockService(GithubProfileService::class, static fn(): GithubProfileService => $service);
+        $this->testIsland('NamespaceProfile', [
+            'namespace' => 'example',
+            'githubUrl' => 'https://github.com/example',
+        ])->assertSee('Plugins for your CakePHP projects.')->assertSee('data-namespace-avatar');
+    }
+}
diff --git a/tests/TestCase/Island/PublishersIslandTest.php b/tests/TestCase/Island/PublishersIslandTest.php
new file mode 100644
index 00000000..66d7ffa3
--- /dev/null
+++ b/tests/TestCase/Island/PublishersIslandTest.php
@@ -0,0 +1,87 @@
+<?php
+declare(strict_types=1);
+
+namespace App\Test\TestCase\Island;
+
+use App\Model\Table\PackagesTable;
+use App\Service\GithubApiService;
+use Cake\Cache\Cache;
+use Cake\TestSuite\TestCase;
+use Interact\TestSuite\IslandTestTrait;
+use Override;
+
+/**
+ * Directory state is transported independently of request-local aggregate results.
+ */
+class PublishersIslandTest extends TestCase
+{
+    use IslandTestTrait;
+
+    /**
+     * @var list<string>
+     */
+    #[Override]
+    protected array $fixtures = ['app.Packages', 'app.PublisherVersions', 'app.PublisherTagged'];
+
+    /**
+     * Version options must reflect this test's compatibility fixtures.
+     */
+    protected function setUp(): void
+    {
+        parent::setUp();
+        Cache::delete('package_filter_tags_v1');
+    }
+
+    /**
+     * Filtering and sorting do not trigger external profile lookups.
+     */
+    public function testSearchSortAndClear(): void
+    {
+        $github = $this->createMock(GithubApiService::class);
+        $github->expects($this->never())->method('get');
+        $this->mockService(GithubApiService::class, static fn(): GithubApiService => $github);
+        $this->testIsland('Publishers')
+            ->assertSee('data-publisher-rank')
+            ->assertDontSee('/plugins/cakedc')
+            ->set('cakephp', 'all')
+            ->set('sort', 'stars')
+            ->assertSet('sort', 'stars')
+            ->set('search', 'cakedc')
+            ->assertSee('/plugins/cakedc')
+            ->assertDontSee('/plugins/vendor')
+            ->assertDontSee('data-publisher-rank')
+            ->call('clearSearch')
+            ->assertSet('search', '')
+            ->assertSet('sort', 'stars')
+            ->assertSet('cakephp', 'all')
+            ->set('sort', 'invalid')
+            ->assertSet('sort', 'monthly_downloads');
+    }
+
+    /**
+     * Search changes return to page one and rank numbering spans pages.
+     */
+    public function testPaginationAndFilterReset(): void
+    {
+        $packages = $this->fetchTable(PackagesTable::class);
+        $record = $packages->get(1)->toArray();
+        unset($record['id']);
+        $record['tag_list'] = ['CakePHP: 5.4'];
+        for ($i = 1; $i <= 21; $i++) {
+            $name = sprintf('publisher-%02d', $i);
+            $record['package'] = $name . '/plugin';
+            $packages->saveOrFail($packages->newEntity($record));
+        }
+        $this->testIsland('Publishers')
+            ->set('paging.page', 2)
+            ->assertSet('paging.page', 2)
+            ->assertSee('Rank 21')
+            ->set('cakephp', '4')
+            ->assertSet('paging.page', 1)
+            ->assertSee('/plugins/cakedc')
+            ->set('cakephp', 'current')
+            ->set('search', 'vendor')
+            ->assertSet('paging.page', 1)
+            ->assertDontSee('data-publisher-rank');
+    }
+}
diff --git a/tests/TestCase/Model/Table/PackagesTableTest.php b/tests/TestCase/Model/Table/PackagesTableTest.php
index 2dd75ff5..da663e4f 100644
--- a/tests/TestCase/Model/Table/PackagesTableTest.php
+++ b/tests/TestCase/Model/Table/PackagesTableTest.php
@@ -4,6 +4,7 @@
 namespace App\Test\TestCase\Model\Table;
 
 use App\Model\Table\PackagesTable;
+use Cake\Cache\Cache;
 use Cake\TestSuite\TestCase;
 use Override;
 
@@ -16,7 +17,16 @@ class PackagesTableTest extends TestCase
      * @var list<string>
      */
     #[Override]
-    protected array $fixtures = ['app.Packages', 'app.Categories', 'app.CategoriesPackages', 'plugin.Tags.Tags', 'plugin.Tags.Tagged'];
+    protected array $fixtures = ['app.Packages', 'app.Categories', 'app.CategoriesPackages', 'app.PublisherVersions', 'app.PublisherTagged'];
+
+    /**
+     * Version options must reflect this test's compatibility fixtures.
+     */
+    protected function setUp(): void
+    {
+        parent::setUp();
+        Cache::delete('package_filter_tags_v1');
+    }
 
     /**
      * Grid counts represent unique packages in each category across the directory.
@@ -81,4 +91,218 @@ public function testFeaturedCandidates(): void
             'vendor/package-07', 'vendor/package-08', 'vendor/package-09',
         ], $results->extract('package')->toList());
     }
+
+    /**
+     * Namespace matching is literal and ends at the Composer vendor separator.
+     */
+    public function testNamespaceMatching(): void
+    {
+        $packages = $this->fetchTable(PackagesTable::class);
+        $names = [
+            2 => 'vendor_extra/one',
+            3 => 'vendorXextra/two',
+            4 => 'vendor_extra_more/three',
+            5 => 'vendor.extra/four',
+        ];
+        foreach ($names as $id => $name) {
+            $package = $packages->get($id);
+            $package->package = $name;
+            $packages->saveOrFail($package);
+        }
+        $this->assertSame([2], $packages->find('namespace', namespace: 'vendor_extra')->all()->extract('id')->toList());
+        $this->assertSame([5], $packages->find('namespace', namespace: 'vendor.extra')->all()->extract('id')->toList());
+        $this->assertSame(0, $packages->find('namespace', namespace: 'vendor%')->count());
+        $this->assertSame(0, $packages->find('namespace', namespace: "vendor' OR 1=1")->count());
+        $this->assertSame(19, $packages->find('namespace', namespace: 'vendor')->count());
+    }
+
+    /**
+     * Imports derive the namespace, and renames cannot retain a stale or forged vendor.
+     */
+    public function testNamespaceIsDerivedOnCreateAndRename(): void
+    {
+        $packages = $this->fetchTable(PackagesTable::class);
+        $package = $packages->newEntity([
+            'package' => 'Example_Vendor/plugin',
+            'namespace' => 'forged',
+            'description' => 'Example package.',
+            'repo_url' => 'https://github.com/example/plugin',
+            'downloads' => 100,
+            'stars' => 10,
+            'latest_stable_version' => '1.0.0',
+            'latest_stable_release_date' => null,
+        ]);
+        $packages->saveOrFail($package);
+        $this->assertSame('example_vendor', $packages->get($package->id)->namespace);
+        $package = $packages->patchEntity($package, [
+            'package' => 'different.vendor/plugin',
+            'namespace' => 'forged-again',
+        ]);
+        $packages->saveOrFail($package);
+        $this->assertSame('different.vendor', $packages->get($package->id)->namespace);
+        $this->assertSame(0, $packages->find('namespace', namespace: 'example_vendor')->count());
+        $this->assertSame(1, $packages->find('namespace', namespace: 'different.vendor')->count());
+    }
+
+    /**
+     * Totals and category counts cover only the requested namespace.
+     */
+    public function testNamespaceStatisticsAndCategories(): void
+    {
+        $packages = $this->fetchTable(PackagesTable::class);
+        $this->assertSame([
+            'plugins' => 23,
+            'downloads' => 22701,
+            'stars' => 2001,
+        ], $packages->namespaceStats('vendor'));
+        $this->assertSame([
+            'plugins' => 0,
+            'downloads' => 0,
+            'stars' => 0,
+        ], $packages->namespaceStats('missing'));
+        $this->assertSame([
+            'asset-management' => [
+                'name' => 'Asset Management',
+                'count' => 1,
+            ],
+            'code-analysis' => [
+                'name' => 'Code Analysis',
+                'count' => 1,
+            ],
+        ], $packages->categoryOptions('markstory'));
+        $this->assertSame([], $packages->categoryOptions('vendor'));
+        $this->assertSame(1, $packages->find('catalogue', filters: ['awesome' => true], namespace: 'markstory')->count());
+        $this->assertSame(0, $packages->find('catalogue', filters: ['search' => 'users'], namespace: 'markstory')->count());
+        $this->assertSame(0, $packages->find('catalogue', filters: ['category' => 'authentication-authorization'], namespace: 'markstory')->count());
+    }
+
+    /**
+     * Repository URLs identify a profile independently of the Composer namespace.
+     */
+    public function testNamespaceGithubProfile(): void
+    {
+        $packages = $this->fetchTable(PackagesTable::class);
+        $this->assertSame('https://github.com/vendor', $packages->namespaceGithubUrl('vendor'));
+        $packages->updateAll(['repo_url' => 'https://www.github.com/Actual-Owner/plugin.git'], ['id' => 1]);
+        $this->assertSame('https://github.com/actual-owner', $packages->namespaceGithubUrl('markstory'));
+        $packages->updateAll(['repo_url' => 'git@github.com:Actual-Owner/plugin.git'], ['id' => 1]);
+        $this->assertSame('https://github.com/actual-owner', $packages->namespaceGithubUrl('markstory'));
+        $packages->updateAll(['repo_url' => 'https://github.com/another-owner/plugin'], ['id' => 2]);
+        $this->assertNull($packages->namespaceGithubUrl('vendor'));
+        $unsupportedUrls = [
+            'https://gitlab.com/markstory/plugin',
+            'https://github.com.example.com/markstory/plugin',
+            'https://github.com/markstory',
+            'https://github.com/invalid_owner/plugin',
+        ];
+        foreach ($unsupportedUrls as $url) {
+            $packages->updateAll(['repo_url' => $url], ['id' => 1]);
+            $this->assertNull($packages->namespaceGithubUrl('markstory'));
+        }
+        $this->assertNull($packages->namespaceGithubUrl('missing'));
+    }
+
+    /**
+     * Rankings use namespace totals, with stable alphabetical ties.
+     */
+    public function testPublisherRankings(): void
+    {
+        $packages = $this->fetchTable(PackagesTable::class);
+        $downloads = $packages->unhydratedFind('publishers')->all()->toList();
+        $this->assertSame(['vendor', 'dereuromark', 'cakedc', 'markstory'], array_column($downloads, 'namespace'));
+        $this->assertEquals([
+            'namespace' => 'vendor',
+            'plugins' => 23,
+            'downloads' => 22701,
+            'monthly_downloads' => 2001,
+            'stars' => 2001,
+            'latest_release' => '2025-02-24',
+        ], $downloads[0]);
+        $this->assertSame(['vendor', 'cakedc', 'markstory', 'dereuromark'], $packages->unhydratedFind('publishers', sort: 'stars')->all()->extract('namespace')->toList());
+        $this->assertSame(['vendor', 'cakedc', 'dereuromark', 'markstory'], $packages->unhydratedFind('publishers', sort: 'plugins')->all()->extract('namespace')->toList());
+        $this->assertEquals($downloads, $packages->unhydratedFind('publishers', sort: 'unknown')->all()->toList());
+        $packages->updateAll(['downloads' => 5000], ['id' => 25]);
+        $this->assertSame(['vendor', 'dereuromark', 'cakedc', 'markstory'], $packages->unhydratedFind('publishers', sort: 'downloads')->all()->extract('namespace')->toList());
+    }
+
+    /**
+     * Search uses literal substrings rather than SQL wildcard semantics.
+     */
+    public function testPublisherSearch(): void
+    {
+        $packages = $this->fetchTable(PackagesTable::class);
+        $this->assertSame(['dereuromark'], $packages->unhydratedFind('publishers', search: ' REURO ')->all()->extract('namespace')->toList());
+        $this->assertSame(0, $packages->unhydratedFind('publishers', search: '%')->count());
+        $package = $packages->get(2);
+        $package->package = 'vendor_extra/package';
+        $packages->saveOrFail($package);
+        $this->assertSame(['vendor_extra'], $packages->unhydratedFind('publishers', search: '_')->all()->extract('namespace')->toList());
+    }
+
+    /**
+     * Previews are bounded, metric-aware, and consider every repository owner.
+     */
+    public function testPublisherDetails(): void
+    {
+        $packages = $this->fetchTable(PackagesTable::class);
+        $details = $packages->publisherDetails(['vendor', 'markstory']);
+        $this->assertSame(['vendor/package-01', 'vendor/package-02'], array_column($details['vendor']['plugins'], 'package'));
+        $this->assertSame('https://github.com/vendor', $details['vendor']['githubUrl']);
+        $this->assertCount(1, $details['markstory']['plugins']);
+        $packages->updateAll(['stars' => 999, 'repo_url' => 'https://github.com/another-owner/plugin'], ['id' => 24]);
+        $this->assertNull($packages->publisherDetails(['vendor'])['vendor']['githubUrl']);
+        $this->assertSame(['vendor/package-23', 'vendor/package-01'], array_column($packages->publisherDetails(['vendor'], 'stars')['vendor']['plugins'], 'package'));
+        $this->assertSame(['vendor/package-01', 'vendor/package-02'], array_column($packages->publisherDetails(['vendor'], 'plugins')['vendor']['plugins'], 'package'));
+        $this->assertSame([], $packages->publisherDetails([]));
+    }
+
+    /**
+     * Legacy-only packages cannot inflate current-major totals or previews.
+     */
+    public function testPublisherCompatibilityScope(): void
+    {
+        $packages = $this->fetchTable(PackagesTable::class);
+        $this->assertSame(['5', '4'], $packages->publisherMajors());
+        $packages->updateAll([
+            'monthly_downloads' => 999999,
+            'downloads' => 99999999,
+            'stars' => 99999,
+        ], ['id' => 25]);
+        $this->assertSame('cakedc', $packages->unhydratedFind('publishers')->first()['namespace']);
+        $current = $packages->unhydratedFind('publishers', major: '5')->all()->toList();
+        $this->assertSame(['vendor', 'dereuromark', 'markstory'], array_column($current, 'namespace'));
+        $this->assertEquals(1, $current[2]['plugins']);
+        $this->assertEquals(150, $current[2]['monthly_downloads']);
+        $this->assertSame('2025-01-15', $current[2]['latest_release']);
+
+        $packages->Tagged->updateAll(['tag_id' => 3], ['fk_id' => 24, 'fk_model' => 'Packages']);
+        $packages->updateAll([
+            'monthly_downloads' => 999999,
+            'repo_url' => 'https://github.com/another-owner/plugin',
+        ], ['id' => 24]);
+        $vendor = $packages->unhydratedFind('publishers', major: '5', search: 'vendor')->first();
+        $this->assertEquals(22, $vendor['plugins']);
+        $this->assertEquals(1925, $vendor['monthly_downloads']);
+        $details = $packages->publisherDetails(['vendor'], major: '5');
+        $this->assertSame(['package-01', 'package-02'], array_column($details['vendor']['plugins'], 'name'));
+        $this->assertNull($details['vendor']['githubUrl']);
+        $this->assertSame('cakedc', $packages->unhydratedFind('publishers', major: '4')->first()['namespace']);
+    }
+
+    /**
+     * Recent usage can reverse lifetime rankings; missing data is never treated as zero.
+     */
+    public function testMonthlyRankingsAndUnknownCounts(): void
+    {
+        $packages = $this->fetchTable(PackagesTable::class);
+        $packages->updateAll(['monthly_downloads' => 3000], ['id' => 1]);
+        $this->assertSame('markstory', $packages->unhydratedFind('publishers', major: '5')->first()['namespace']);
+        $this->assertSame('vendor', $packages->unhydratedFind('publishers', major: '5', sort: 'downloads')->first()['namespace']);
+        $packages->updateAll(['monthly_downloads' => null], ['id' => 2]);
+        $vendor = $packages->unhydratedFind('publishers', search: 'vendor')->first();
+        $this->assertNull($vendor['monthly_downloads']);
+        $packages->updateAll(['monthly_downloads' => 0], ['id' => 1]);
+        $this->assertSame(['dereuromark', 'markstory', 'vendor'], $packages->unhydratedFind('publishers', major: '5')->all()->extract('namespace')->toList());
+        $this->assertEquals(0, $packages->unhydratedFind('publishers', search: 'markstory')->first()['monthly_downloads']);
+    }
 }
diff --git a/tests/TestCase/Service/GithubApiServiceTest.php b/tests/TestCase/Service/GithubApiServiceTest.php
new file mode 100644
index 00000000..d32189c1
--- /dev/null
+++ b/tests/TestCase/Service/GithubApiServiceTest.php
@@ -0,0 +1,70 @@
+<?php
+declare(strict_types=1);
+
+namespace App\Test\TestCase\Service;
+
+use App\Service\GithubApiService;
+use Cake\Http\Client;
+use Cake\Http\Client\Response;
+use Cake\TestSuite\TestCase;
+use InvalidArgumentException;
+
+/**
+ * Shared request settings never leak a login token into another request.
+ */
+class GithubApiServiceTest extends TestCase
+{
+    /**
+     * Public requests set GitHub defaults without requiring authentication.
+     */
+    public function testPublicRequestUsesSharedDefaults(): void
+    {
+        $response = new Response(['HTTP/1.1 200 OK'], '{}');
+        $client = $this->createMock(Client::class);
+        $client->expects($this->once())->method('get')->with('https://api.github.com/users/example', [], [
+            'timeout' => 3,
+            'headers' => [
+                'Accept' => 'application/vnd.github+json',
+                'User-Agent' => 'plugins.cakephp.org',
+                'X-GitHub-Api-Version' => '2022-11-28',
+            ],
+        ])->willReturn($response);
+        $this->assertSame($response, new GithubApiService($client)->get('/users/example'));
+    }
+
+    /**
+     * User-specific credentials override the application token for one request only.
+     */
+    public function testRequestTokenDoesNotLeakIntoSubsequentRequests(): void
+    {
+        $client = $this->createMock(Client::class);
+        $requests = [];
+        $client->expects($this->exactly(3))->method('get')->willReturnCallback(
+            static function (string $url, array $query, array $options) use (&$requests): Response {
+                $requests[] = [$url, $query, $options['headers']['Authorization'] ?? null];
+
+                return new Response(['HTTP/1.1 200 OK'], '{}');
+            },
+        );
+        $github = new GithubApiService($client, 'application-token');
+        $github->get('/user/memberships/orgs/cakephp', token: 'user-token');
+        $github->get('/users/example', ['page' => 2]);
+        $github->get('/users/example', token: '');
+        $this->assertSame([
+            ['https://api.github.com/user/memberships/orgs/cakephp', [], 'Bearer user-token'],
+            ['https://api.github.com/users/example', ['page' => 2], 'Bearer application-token'],
+            ['https://api.github.com/users/example', [], null],
+        ], $requests);
+    }
+
+    /**
+     * A caller cannot direct the configured application token to another host.
+     */
+    public function testAbsoluteUrlsAreRejected(): void
+    {
+        $client = $this->createMock(Client::class);
+        $client->expects($this->never())->method('get');
+        $this->expectException(InvalidArgumentException::class);
+        new GithubApiService($client, 'application-token')->get('https://example.com/users');
+    }
+}
diff --git a/tests/TestCase/Service/GithubProfileServiceTest.php b/tests/TestCase/Service/GithubProfileServiceTest.php
new file mode 100644
index 00000000..4623714f
--- /dev/null
+++ b/tests/TestCase/Service/GithubProfileServiceTest.php
@@ -0,0 +1,151 @@
+<?php
+declare(strict_types=1);
+
+namespace App\Test\TestCase\Service;
+
+use App\Service\GithubApiService;
+use App\Service\GithubProfileService;
+use Cake\Cache\Cache;
+use Cake\Http\Client\Exception\ClientException;
+use Cake\Http\Client\Response;
+use Cake\TestSuite\TestCase;
+use PHPUnit\Framework\Attributes\DataProvider;
+
+/**
+ * Public enrichment remains optional, cached, and independent of login data.
+ */
+class GithubProfileServiceTest extends TestCase
+{
+    /**
+     * Keep cache hits and failures independent between examples.
+     */
+    protected function setUp(): void
+    {
+        parent::setUp();
+        Cache::clear('github_profiles');
+    }
+
+    /**
+     * Normalize the owner and retain only public presentation fields.
+     */
+    public function testProfileIsCachedAcrossRequestsAndCasing(): void
+    {
+        $client = $this->createMock(GithubApiService::class);
+        $client->expects($this->once())->method('get')->with('/users/cakedc')->willReturn(new Response(
+            ['HTTP/1.1 200 OK'],
+            json_encode([
+                'login' => 'CakeDC',
+                'type' => 'Organization',
+                'avatar_url' => 'https://avatars.githubusercontent.com/u/123',
+                'bio' => '  CakePHP development and consulting.  ',
+                'email' => 'private@example.com',
+            ], JSON_THROW_ON_ERROR),
+        ));
+        $expected = [
+            'avatarUrl' => 'https://avatars.githubusercontent.com/u/123',
+            'bio' => 'CakePHP development and consulting.',
+        ];
+        $this->assertSame($expected, new GithubProfileService($client)->profile('CakeDC'));
+        $this->assertSame($expected, new GithubProfileService($client)->profile('cakedc'));
+    }
+
+    /**
+     * Missing, throttled, and invalid responses all use a cached fallback.
+     */
+    #[DataProvider('unavailableProfiles')]
+    public function testUnavailableProfileUsesCachedFallback(string $status, string $body): void
+    {
+        $client = $this->createMock(GithubApiService::class);
+        $client->expects($this->once())->method('get')->willReturn(new Response([$status], $body));
+        $service = new GithubProfileService($client);
+        $this->assertSame([
+            'avatarUrl' => 'https://github.com/example.png?size=192',
+            'bio' => null,
+        ], $service->profile('example'));
+        $this->assertSame([
+            'avatarUrl' => 'https://github.com/example.png?size=192',
+            'bio' => null,
+        ], $service->profile('example'));
+    }
+
+    /**
+     * @return array<string, array{string, string}>
+     */
+    public static function unavailableProfiles(): array
+    {
+        return [
+            'missing' => ['HTTP/1.1 404 Not Found', '{}'],
+            'rate limited' => ['HTTP/1.1 403 Forbidden', '{}'],
+            'server error' => ['HTTP/1.1 503 Unavailable', '{}'],
+            'malformed JSON' => ['HTTP/1.1 200 OK', '<html>Unavailable</html>'],
+            'wrong profile' => ['HTTP/1.1 200 OK', '{"login":"somebody-else"}'],
+        ];
+    }
+
+    /**
+     * Network failures do not repeatedly retry on subsequent catalogue visits.
+     */
+    public function testNetworkFailureUsesCachedFallback(): void
+    {
+        $client = $this->createMock(GithubApiService::class);
+        $client->expects($this->once())->method('get')->willThrowException(new ClientException('Connection failed'));
+        $service = new GithubProfileService($client);
+        $this->assertSame([
+            'avatarUrl' => 'https://github.com/example.png?size=192',
+            'bio' => null,
+        ], $service->profile('example'));
+        $this->assertSame([
+            'avatarUrl' => 'https://github.com/example.png?size=192',
+            'bio' => null,
+        ], $service->profile('example'));
+    }
+
+    /**
+     * Do not render non-GitHub avatar URLs or blank biographies.
+     */
+    public function testUnsafeAvatarAndEmptyBioAreOmitted(): void
+    {
+        $client = $this->createStub(GithubApiService::class);
+        $client->method('get')->willReturn(new Response(
+            ['HTTP/1.1 200 OK'],
+            '{"login":"example","avatar_url":"javascript:alert(1)","bio":"   "}',
+        ));
+        $this->assertSame(['avatarUrl' => 'https://github.com/example.png?size=192', 'bio' => null], new GithubProfileService($client)->profile('example'));
+    }
+
+    /**
+     * Invalid owner values never become outbound request paths.
+     */
+    public function testInvalidOwnerDoesNotFetch(): void
+    {
+        $client = $this->createMock(GithubApiService::class);
+        $client->expects($this->never())->method('get');
+        $this->assertNull(new GithubProfileService($client)->profile('../users'));
+    }
+
+    /**
+     * Directory avatars do not consume API quota.
+     */
+    public function testAvatarUrlDoesNotFetchMetadata(): void
+    {
+        $github = $this->createMock(GithubApiService::class);
+        $github->expects($this->never())->method('get');
+        $service = new GithubProfileService($github);
+        $this->assertSame('https://github.com/example.png?size=96', $service->avatarUrl('Example', 96));
+        $this->assertNull($service->avatarUrl('invalid_owner'));
+    }
+
+    /**
+     * Existing cached failures must not hide otherwise accessible public avatars.
+     */
+    public function testCachedRateLimitStillProvidesPublicAvatar(): void
+    {
+        Cache::pool('github_profiles')->set('github_profile_v2_lordsimal', [], 900);
+        $client = $this->createMock(GithubApiService::class);
+        $client->expects($this->never())->method('get');
+        $this->assertSame([
+            'avatarUrl' => 'https://github.com/lordsimal.png?size=192',
+            'bio' => null,
+        ], new GithubProfileService($client)->profile('LordSimal'));
+    }
+}
diff --git a/tests/TestCase/Service/PackagistImporterTest.php b/tests/TestCase/Service/PackagistImporterTest.php
index 19217804..34cf1cc2 100644
--- a/tests/TestCase/Service/PackagistImporterTest.php
+++ b/tests/TestCase/Service/PackagistImporterTest.php
@@ -43,7 +43,10 @@ public function testSyncUpdatesMetadataAndPreservesCategories(): void
         $version = new Version();
         $version->fromArray(['version' => '5.1.0', 'time' => '2026-04-05T11:22:33+00:00', 'require' => ['php' => '^8.2', 'cakephp/cakephp' => '^5.0']]);
         $downloads = new Downloads();
-        $downloads->fromArray(['total' => 12345]);
+        $downloads->fromArray([
+            'total' => 12345,
+            'monthly' => 1234,
+        ]);
         $metadata = new Package();
         $metadata->fromArray([
             'description' => 'Updated plugin description', 'repository' => 'https://github.com/markstory/asset_compress',
@@ -61,6 +64,8 @@ public function testSyncUpdatesMetadataAndPreservesCategories(): void
         $package = $packages->get(1, contain: ['Categories', 'Tags']);
         $this->assertCount(2, $package->categories);
         $this->assertSame('Updated plugin description', $package->description);
+        $this->assertSame('markstory', $package->namespace);
+        $this->assertSame(1234, $package->monthly_downloads);
         $this->assertSame('5.1.0', $package->latest_stable_version);
         $this->assertEquals(new Date('2026-04-05'), $package->latest_stable_release_date);
         $this->assertContains('cakephp-5-4', array_column($package->tags, 'slug'));
diff --git a/tests/TestCase/View/Helper/NumberHelperTest.php b/tests/TestCase/View/Helper/NumberHelperTest.php
new file mode 100644
index 00000000..0e9483f7
--- /dev/null
+++ b/tests/TestCase/View/Helper/NumberHelperTest.php
@@ -0,0 +1,56 @@
+<?php
+declare(strict_types=1);
+
+namespace App\Test\TestCase\View\Helper;
+
+use App\View\Helper\NumberHelper;
+use Cake\I18n\I18n;
+use Cake\TestSuite\TestCase;
+use Cake\View\View;
+use PHPUnit\Framework\Attributes\DataProvider;
+
+/**
+ * Compact counters retain native locale formatting and omit unnecessary decimals.
+ */
+class NumberHelperTest extends TestCase
+{
+    /**
+     * Keep small counts exact and round larger counts to one decimal.
+     */
+    #[DataProvider('compactCounts')]
+    public function testCompact(int $value, string $expected): void
+    {
+        $this->assertSame($expected, new NumberHelper(new View())->compact($value));
+    }
+
+    /**
+     * @return array<string, array{int, string}>
+     */
+    public static function compactCounts(): array
+    {
+        return [
+            'zero' => [0, '0'],
+            'small count' => [42, '42'],
+            'before thousands' => [999, '999'],
+            'thousands' => [1_000, '1k'],
+            'rounded thousands' => [22_701, '22.7k'],
+            'millions' => [1_000_000, '1M'],
+            'rounded millions' => [8_789_626, '8.8M'],
+            'billions' => [1_000_000_000, '1B'],
+        ];
+    }
+
+    /**
+     * Decimal separators follow the current CakePHP locale.
+     */
+    public function testCompactUsesCurrentLocale(): void
+    {
+        $locale = I18n::getLocale();
+        try {
+            I18n::setLocale('de_DE');
+            $this->assertSame('22,7k', new NumberHelper(new View())->compact(22_701));
+        } finally {
+            I18n::setLocale($locale);
+        }
+    }
+}
diff --git a/tests/bootstrap.php b/tests/bootstrap.php
index b9894b08..0400291c 100644
--- a/tests/bootstrap.php
+++ b/tests/bootstrap.php
@@ -41,6 +41,8 @@
 // Fixture-derived options must never populate the development application's cache.
 Cache::drop('default');
 Cache::setConfig('default', ['className' => ArrayEngine::class]);
+Cache::drop('github_profiles');
+Cache::setConfig('github_profiles', ['className' => ArrayEngine::class]);
 
 if (empty($_SERVER['HTTP_HOST']) && !Configure::read('App.fullBaseUrl')) {
     Configure::write('App.fullBaseUrl', 'http://localhost');
diff --git a/tests/browser/catalogue.spec.js b/tests/browser/catalogue.spec.js
index 590433a9..b315906d 100644
--- a/tests/browser/catalogue.spec.js
+++ b/tests/browser/catalogue.spec.js
@@ -166,7 +166,7 @@ test('category filters and source attribution work without JavaScript', async ({
         await expect(page).toHaveURL(/awesome=1/)
         await expect(rows(page)).toHaveCount(1)
         await rows(page).locator('.package-name a').click()
-        await expect(page).toHaveURL(/plugins\/1$/)
+        await expect(page).toHaveURL(/plugins\/markstory\/asset_compress$/)
         await expect(page.locator('.plugin-category-links a')).toHaveCount(2)
         await expect(page.getByRole('link', { name: 'Awesome CakePHP', exact: true })).toBeVisible()
         await page.getByRole('link', { name: 'Code Analysis', exact: true }).click()
@@ -478,7 +478,7 @@ test('GET search, version links, details and pagination work without JavaScript'
         await expect(page).toHaveURL(/search=users/)
         await expect(rows(page)).toContainText('cakedc/users')
         await rows(page).getByRole('link', { name: 'cakedc/users', exact: true }).click()
-        await expect(page).toHaveURL(/plugins\/25$/)
+        await expect(page).toHaveURL(/plugins\/cakedc\/users$/)
         await expect(page.locator('.plugin-details')).toContainText('composer require cakedc/users')
         await page.goto('http://127.0.0.1:8765/')
         await page.getByRole('group', { name: 'CakePHP version', exact: true }).getByRole('button', { name: 'CakePHP 4.4' }).click()
diff --git a/tests/browser/namespaces.spec.js b/tests/browser/namespaces.spec.js
new file mode 100644
index 00000000..bc8261f8
--- /dev/null
+++ b/tests/browser/namespaces.spec.js
@@ -0,0 +1,269 @@
+import { test, expect } from '@playwright/test'
+
+const rows = page => page.locator('[data-package-row]')
+const hero = page => page.locator('[data-namespace-hero]')
+const stats = page => page.getByRole('region', { name: 'Namespace statistics', exact: true })
+const pageErrors = new WeakMap()
+const chooseSort = async (page, label) => {
+    await page.getByLabel('Sort plugins', { exact: true }).click()
+    await page.locator('.sort-options').getByRole('link', { name: label, exact: true }).click()
+}
+
+test.beforeEach(async ({ page }) => {
+    const errors = []
+    page.on('pageerror', error => errors.push(error.message))
+    pageErrors.set(page, errors)
+    await page.route('https://avatars.githubusercontent.com/**', route => route.fulfill({
+        contentType: 'image/png',
+        path: 'webroot/img/packagist-logo.png',
+    }))
+})
+
+test.afterEach(async ({ page }) => {
+    expect(pageErrors.get(page)).toEqual([])
+})
+
+test('namespace hero totals and catalogue results use the Composer prefix', async ({ page }) => {
+    await page.goto('/plugins/vendor')
+    await expect(page.getByRole('heading', { level: 1 })).toHaveText('vendor')
+    await expect(hero(page).locator('[data-namespace-stat]')).toHaveCount(0)
+    await expect(page.locator('[data-namespace-banner]').getByRole('link', { name: 'GitHub profile' })).toHaveAttribute('href', 'https://github.com/vendor')
+    await expect(page.locator('[data-namespace-banner]').getByRole('link', { name: 'Packagist', exact: true })).toHaveAttribute('href', 'https://packagist.org/packages/vendor/')
+    await expect(page.locator('[data-namespace-banner]').getByRole('link', { name: 'Packagist', exact: true })).toHaveAttribute('target', '_blank')
+    await expect(page.locator('[data-namespace-banner]').getByRole('link', { name: 'GitHub profile' })).toHaveText('')
+    await expect(page.locator('[data-namespace-banner]').getByRole('link', { name: 'Packagist', exact: true })).toHaveText('')
+    const bannerBounds = await page.locator('[data-namespace-banner]').boundingBox()
+    const navbarBounds = await page.locator('.site-header').boundingBox()
+    expect(bannerBounds.x).toBe(0)
+    expect(bannerBounds.width).toBe(page.viewportSize().width)
+    expect(bannerBounds.y).toBe(navbarBounds.y + navbarBounds.height)
+    const headingBounds = await hero(page).boundingBox()
+    const statsBounds = await stats(page).boundingBox()
+    expect(statsBounds.x).toBeGreaterThan(headingBounds.x + headingBounds.width)
+    expect(Math.abs(statsBounds.y + statsBounds.height / 2 - headingBounds.y - headingBounds.height / 2)).toBeLessThan(1)
+    expect(Math.abs(statsBounds.y + statsBounds.height / 2 - bannerBounds.y - bannerBounds.height / 2)).toBeLessThan(1)
+    await expect(stats(page).locator('[data-namespace-stat="plugins"]')).toHaveText('23')
+    await expect(stats(page).locator('[data-namespace-stat="downloads"]')).toHaveText('22.7k')
+    await expect(stats(page).locator('[data-namespace-stat="downloads"]')).toHaveAttribute('aria-label', '22,701')
+    await expect(stats(page).locator('[data-namespace-stat="stars"]')).toHaveText('2k')
+    await expect(stats(page).locator('[data-namespace-stat="stars"]')).toHaveAttribute('aria-label', '2,001')
+    await expect(rows(page)).toHaveCount(21)
+    expect(await rows(page).evaluateAll(elements => elements.every(element => element.textContent.includes('vendor/package-')))).toBe(true)
+    await expect(page.locator('[data-featured-plugins]')).toHaveCount(0)
+    await expect(page.locator('link[rel="canonical"]')).toHaveAttribute('href', 'http://127.0.0.1:8765/plugins/vendor')
+    await expect(page.locator('meta[name="robots"]')).toHaveCount(0)
+    await page.screenshot({ path: 'tmp/namespace-desktop.png', animations: 'disabled' })
+})
+
+test('search, version filters, sorting and reset retain the namespace and hero', async ({ page }) => {
+    await page.goto('/plugins/vendor')
+    await page.evaluate(() => { window.namespaceMarker = 'retained' })
+    await chooseSort(page, 'Downloads')
+    await page.getByRole('searchbox', { name: 'Search plugins', exact: true }).fill('package-01')
+    await expect(rows(page)).toHaveCount(1)
+    await expect(rows(page)).toContainText('vendor/package-01')
+    await page.getByRole('button', { name: 'CakePHP 4.4', exact: true }).click()
+    await expect(rows(page)).toHaveCount(0)
+    await expect(page.getByText('No plugins found', { exact: true })).toBeVisible()
+    await expect(stats(page).locator('[data-namespace-stat="plugins"]')).toHaveText('23')
+    await expect(page.locator('meta[name="robots"]')).toHaveAttribute('content', 'noindex,nofollow')
+    await page.getByRole('link', { name: 'Reset filters', exact: true }).click()
+    await expect(rows(page)).toHaveCount(21)
+    await expect(page).toHaveURL('/plugins/vendor?sort=downloads')
+    expect(await page.evaluate(() => window.namespaceMarker)).toBe('retained')
+    await expect(page.getByRole('search')).toHaveAttribute('action', '/plugins/vendor')
+})
+
+test('pagination and history stay on the namespace page', async ({ page }) => {
+    await page.goto('/plugins/vendor')
+    await page.evaluate(() => { window.namespaceMarker = 'retained' })
+    await page.getByRole('link', { name: 'Last', exact: true }).click()
+    await expect(page).toHaveURL('/plugins/vendor?page=2')
+    await expect(rows(page)).toHaveCount(2)
+    await page.getByRole('link', { name: 'First', exact: true }).click()
+    await expect(page).toHaveURL('/plugins/vendor')
+    await expect(rows(page)).toHaveCount(21)
+    await page.goBack()
+    await expect(page).toHaveURL('/plugins/vendor?page=2')
+    await expect(rows(page)).toHaveCount(2)
+    await page.goForward()
+    await expect(rows(page)).toHaveCount(21)
+    expect(await page.evaluate(() => window.namespaceMarker)).toBe('retained')
+    await page.reload()
+    await expect(rows(page)).toHaveCount(21)
+})
+
+test('category choices and detail filters stay within the namespace', async ({ page }) => {
+    await page.goto('/plugins/markstory')
+    await page.getByText('Browse categories', { exact: true }).click()
+    const categories = page.getByRole('group', { name: 'Plugin categories', exact: true })
+    await expect(categories.getByRole('link', { name: 'Asset Management, 1 plugin', exact: true })).toBeVisible()
+    await expect(categories.getByRole('link', { name: /Authentication/ })).toHaveCount(0)
+    await categories.getByRole('link', { name: 'Asset Management, 1 plugin', exact: true }).click()
+    await expect(page).toHaveURL('/plugins/markstory?category=asset-management')
+    await expect(rows(page)).toHaveCount(1)
+    await page.getByRole('button', { name: 'Awesome only', exact: true }).click()
+    await expect(rows(page)).toHaveCount(1)
+    await rows(page).getByRole('link', { name: 'markstory/asset_compress', exact: true }).click()
+    const dialog = page.getByRole('dialog')
+    await dialog.getByRole('link', { name: 'Code Analysis', exact: true }).click()
+    await expect(dialog).not.toBeVisible()
+    await expect(page).toHaveURL(/\/plugins\/markstory\?/)
+    await expect(page).toHaveURL(/category=code-analysis/)
+    await expect(rows(page)).toHaveCount(1)
+    await expect(stats(page).locator('[data-namespace-stat="downloads"]')).toHaveText('5k')
+    await rows(page).getByRole('link', { name: 'markstory/asset_compress', exact: true }).click()
+    await dialog.getByRole('link', { name: 'PHP 8.5', exact: true }).click()
+    await expect(rows(page)).toHaveCount(1)
+    await expect(page).toHaveURL(/\/plugins\/markstory\?/)
+    await expect(page).toHaveURL(/php_slugs/)
+    await expect(stats(page).locator('[data-namespace-stat="plugins"]')).toHaveText('1')
+})
+
+test('namespace links navigate from rows, modal details and standalone details', async ({ page }) => {
+    await page.goto('/')
+    await expect(page.locator('#package-26').getByRole('link', { name: 'dereuromark/cakephp-tools', exact: true }))
+        .toHaveAttribute('href', '/plugins/dereuromark/cakephp-tools')
+    await expect(page.locator('[data-featured-plugins]').getByRole('link', { name: 'View markstory/asset_compress details', exact: true }))
+        .toHaveAttribute('href', '/plugins/markstory/asset_compress')
+    await page.evaluate(() => { window.namespaceMarker = 'retained' })
+    await page.getByRole('link', { name: 'More by dereuromark', exact: true }).click()
+    await expect(page).toHaveURL('/plugins/dereuromark')
+    expect(await page.evaluate(() => window.namespaceMarker)).toBe('retained')
+    await page.goBack()
+    await expect(page).toHaveURL('/')
+    await page.locator('#package-26').getByRole('link', { name: 'dereuromark/cakephp-tools', exact: true }).click()
+    await page.getByRole('dialog').getByRole('link', { name: 'View all plugins by dereuromark', exact: true }).click()
+    await expect(page).toHaveURL('/plugins/dereuromark')
+    await expect(page.getByRole('dialog')).not.toBeVisible()
+    await expect(hero(page)).toBeVisible()
+    expect(await page.evaluate(() => window.namespaceMarker)).toBe('retained')
+    await page.goto('/plugins/dereuromark/cakephp-tools')
+    await expect(page.locator('link[rel="canonical"]')).toHaveAttribute('href', 'http://127.0.0.1:8765/plugins/dereuromark/cakephp-tools')
+    await page.evaluate(() => { window.namespaceMarker = 'retained' })
+    await page.getByRole('link', { name: 'View all plugins by dereuromark', exact: true }).click()
+    await expect(page).toHaveURL('/plugins/dereuromark')
+    expect(await page.evaluate(() => window.namespaceMarker)).toBe('retained')
+})
+
+test('namespace pages support native links and search without JavaScript', async ({ browser }) => {
+    const context = await browser.newContext({ javaScriptEnabled: false })
+    const page = await context.newPage()
+    try {
+        await page.goto('/plugins/markstory')
+        await page.getByText('Browse categories', { exact: true }).click()
+        await page.getByRole('link', { name: 'Asset Management, 1 plugin', exact: true }).click()
+        await expect(page).toHaveURL(/\/plugins\/markstory\?.*category=asset-management/)
+        await page.getByRole('searchbox', { name: 'Search plugins', exact: true }).fill('no-match')
+        await page.getByRole('searchbox', { name: 'Search plugins', exact: true }).press('Enter')
+        await expect(page).toHaveURL(/\/plugins\/markstory\?/)
+        await expect(rows(page)).toHaveCount(0)
+        await expect(stats(page).locator('[data-namespace-stat="plugins"]')).toHaveText('1')
+        await page.getByRole('link', { name: 'Reset filters', exact: true }).click()
+        await expect(rows(page)).toHaveCount(1)
+        await page.goto('/plugins/vendor')
+        await page.getByRole('link', { name: 'Last', exact: true }).click()
+        await expect(page).toHaveURL('/plugins/vendor?page=2')
+        await expect(rows(page)).toHaveCount(2)
+    } finally {
+        await context.close()
+    }
+})
+
+test('namespace profile loads lazily without moving the hero or blocking the catalogue', async ({ page }) => {
+    let release
+    const gate = new Promise(resolve => { release = resolve })
+    await page.route('**/_interact/update', async route => {
+        await gate
+        await route.continue()
+    }, { times: 1 })
+    const response = await page.goto('/plugins/vendor')
+    expect(await response.text()).toContain('data-namespace-profile-loading')
+    const banner = page.locator('[data-namespace-banner]')
+    let loadingBounds
+    try {
+        await expect(hero(page).getByRole('heading', { level: 1 })).toHaveText('vendor')
+        await expect(hero(page).locator('.skeleton')).toBeVisible()
+        await expect(hero(page).locator('[data-namespace-description]')).toHaveText('Plugins for your CakePHP projects.')
+        await expect(rows(page)).toHaveCount(21)
+        loadingBounds = await banner.boundingBox()
+    } finally {
+        release()
+    }
+    const avatar = hero(page).locator('[data-namespace-avatar]')
+    await expect(avatar).toBeVisible()
+    await expect(hero(page).locator('[data-namespace-description]')).toHaveText('CakePHP plugins by vendor.')
+    await expect(hero(page).locator('.skeleton')).toHaveCount(0)
+    expect(await banner.boundingBox()).toEqual(loadingBounds)
+    await avatar.evaluate(element => { element.avatarMarker = 'retained' })
+    await page.getByRole('searchbox', { name: 'Search plugins', exact: true }).fill('package-01')
+    await expect(rows(page)).toHaveCount(1)
+    expect(await avatar.evaluate(element => element.avatarMarker)).toBe('retained')
+})
+
+test('a failed avatar leaves readable initials and the generic description', async ({ page }) => {
+    await page.route('https://avatars.githubusercontent.com/**', route => route.abort())
+    await page.goto('/plugins/cakedc')
+    await expect(page.locator('[data-namespace-profile]')).toBeVisible()
+    await expect(hero(page).locator('[data-namespace-avatar]')).toBeHidden()
+    await expect(hero(page).locator('.namespace-avatar')).toContainText('CA')
+    await expect(hero(page).locator('[data-namespace-description]')).toHaveText('Plugins for your CakePHP projects.')
+})
+
+test('namespace counters count up in sequence without shifting the layout', async ({ page }) => {
+    await page.clock.install({ time: new Date('2026-01-01T00:00:00Z') })
+    await page.clock.pauseAt(new Date('2026-01-01T00:00:01Z'))
+    await page.goto('/plugins/vendor')
+    const plugins = stats(page).locator('[data-namespace-stat="plugins"]')
+    const downloads = stats(page).locator('[data-namespace-stat="downloads"]')
+    const stars = stats(page).locator('[data-namespace-stat="stars"]')
+    const counterBounds = () => page.locator('[data-namespace-hero], [data-namespace-stats], [data-namespace-stat]').evaluateAll(elements => elements.map(element => {
+        const { x, y, width, height } = element.getBoundingClientRect()
+        return { x, y, width, height }
+    }))
+    await page.clock.runFor(100)
+    const initialBounds = await counterBounds()
+    expect(Number(await plugins.textContent())).toBeGreaterThan(0)
+    await expect(downloads).toHaveText('0')
+    await expect(stars).toHaveText('0')
+    await page.clock.runFor(200)
+    expect(await downloads.textContent()).not.toBe('0')
+    await expect(stars).toHaveText('0')
+    expect(await counterBounds()).toEqual(initialBounds)
+    await page.clock.runFor(300)
+    expect(await stars.textContent()).not.toBe('0')
+    expect(await counterBounds()).toEqual(initialBounds)
+    await expect(downloads).toHaveAttribute('aria-label', '22,701')
+    await page.clock.runFor(1200)
+    await expect(downloads).toHaveText('22.7k')
+    await expect(plugins).toHaveText('23')
+    await expect(stars).toHaveText('2k')
+    expect(await counterBounds()).toEqual(initialBounds)
+})
+
+test('namespace hero fits mobile screens in both themes', async ({ page, context }) => {
+    await page.emulateMedia({ reducedMotion: 'reduce' })
+    for (const width of [390, 320]) {
+        await page.setViewportSize({ width, height: 844 })
+        for (const theme of ['cakephp', 'cakephp-dark']) {
+            await context.addCookies([{ name: 'theme', value: theme, domain: '127.0.0.1', path: '/' }])
+            await page.goto('/plugins/dereuromark')
+            await expect(page.locator('html')).toHaveAttribute('data-theme', theme)
+            await expect(hero(page)).toBeVisible()
+            await expect(stats(page).locator('[data-namespace-stat="downloads"]')).toHaveText('20k')
+            expect(await page.evaluate(() => document.documentElement.scrollWidth <= window.innerWidth)).toBe(true)
+            await page.screenshot({ path: `tmp/namespace-mobile-${theme}-${width}.png`, fullPage: true, animations: 'disabled' })
+            expect(await stats(page).locator('[data-namespace-stat]').evaluateAll(elements => elements.every(element => element.scrollWidth <= element.clientWidth))).toBe(true)
+            const banner = page.locator('[data-namespace-banner]')
+            expect(await banner.evaluate(element => ['::before', '::after'].every(pseudo => getComputedStyle(element, pseudo).animationName === 'none'))).toBe(true)
+        }
+    }
+})
+
+test('namespace URLs canonicalize casing and unknown namespaces return 404', async ({ page }) => {
+    await page.goto('/plugins/Dereuromark?search=tools&sort=stars')
+    await expect(page).toHaveURL('/plugins/dereuromark?search=tools&sort=stars')
+    await expect(rows(page)).toHaveCount(1)
+    const response = await page.goto('/plugins/unknown-namespace')
+    expect(response.status()).toBe(404)
+})
diff --git a/tests/browser/publishers-state.php b/tests/browser/publishers-state.php
new file mode 100644
index 00000000..c3af03b5
--- /dev/null
+++ b/tests/browser/publishers-state.php
@@ -0,0 +1,34 @@
+<?php
+declare(strict_types=1);
+
+// Extra publishers exist only for the directory pagination browser test.
+if (PHP_SAPI !== 'cli') {
+    http_response_code(404);
+    exit;
+}
+$database = dirname(__DIR__, 2) . '/tmp/browser.sqlite';
+$connection = new PDO('sqlite:' . $database);
+$connection->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
+$connection->exec("DELETE FROM tags_tagged WHERE fk_model = 'Packages' AND fk_id BETWEEN 1001 AND 1021");
+$connection->exec('DELETE FROM packages WHERE id BETWEEN 1001 AND 1021');
+if (($argv[1] ?? '') !== 'seed') {
+    exit;
+}
+$record = $connection->query('SELECT * FROM packages WHERE id = 1')->fetch(PDO::FETCH_ASSOC);
+if (!$record) {
+    throw new RuntimeException('Browser package fixture is missing.');
+}
+$columns = implode(', ', array_keys($record));
+$parameters = implode(', ', array_fill(0, count($record), '?'));
+$insert = $connection->prepare("INSERT INTO packages ($columns) VALUES ($parameters)");
+for ($i = 1; $i <= 21; $i++) {
+    $record['id'] = 1000 + $i;
+    $record['namespace'] = sprintf('publisher-%02d', $i);
+    $record['package'] = $record['namespace'] . '/plugin';
+    $record['repo_url'] = 'https://gitlab.com/example/plugin';
+    $record['downloads'] = 10;
+    $record['monthly_downloads'] = 10;
+    $record['stars'] = 0;
+    $insert->execute(array_values($record));
+    $connection->prepare("INSERT INTO tags_tagged (tag_id, fk_id, fk_model, created, modified) VALUES (1, ?, 'Packages', '2026-01-01', '2026-01-01')")->execute([$record['id']]);
+}
diff --git a/tests/browser/publishers.spec.js b/tests/browser/publishers.spec.js
new file mode 100644
index 00000000..c46d9f76
--- /dev/null
+++ b/tests/browser/publishers.spec.js
@@ -0,0 +1,215 @@
+import { test, expect } from '@playwright/test'
+import { execFileSync } from 'node:child_process'
+
+const rows = page => page.locator('[data-publisher-namespace]')
+const names = page => rows(page).evaluateAll(elements => elements.map(element => element.dataset.publisherNamespace))
+const search = page => page.getByRole('searchbox', { name: 'Search publishers', exact: true })
+const sort = page => page.getByRole('combobox', { name: 'Rank publishers by', exact: true })
+const version = page => page.getByRole('combobox', { name: 'CakePHP version', exact: true })
+const errors = new WeakMap()
+
+test.beforeEach(async ({ page }) => {
+    const messages = []
+    page.on('pageerror', error => messages.push(error.message))
+    errors.set(page, messages)
+    await page.route('https://github.com/*.png*', route => route.fulfill({
+        contentType: 'image/png',
+        path: 'webroot/img/packagist-logo.png',
+    }))
+    await page.route('https://avatars.githubusercontent.com/**', route => route.fulfill({
+        contentType: 'image/png',
+        path: 'webroot/img/packagist-logo.png',
+    }))
+})
+
+test.afterEach(async ({ page }) => {
+    expect(errors.get(page)).toEqual([])
+})
+
+test('directory ranks publishers with totals and two popular plugins', async ({ page }) => {
+    let islandUpdates = 0
+    page.on('request', request => {
+        if (request.url().endsWith('/_interact/update')) islandUpdates++
+    })
+    await page.goto('/publishers')
+    await expect(page.getByRole('heading', { level: 1 })).toHaveText('Publishers')
+    await expect.poll(() => names(page)).toEqual(['vendor', 'dereuromark', 'markstory'])
+    await expect(page.locator('.desktop-nav').getByRole('link', { name: 'Publishers', exact: true })).toHaveAttribute('aria-current', 'page')
+    const vendor = rows(page).first()
+    await expect(vendor.locator('[data-publisher-rank]')).toHaveText('#1')
+    await expect(vendor.locator('[data-publisher-stat="plugins"]')).toHaveText('23')
+    await expect(vendor.locator('[data-publisher-stat="monthly_downloads"]')).toHaveText('2k')
+    await expect(vendor.locator('[data-publisher-stat="monthly_downloads"]')).toHaveAttribute('aria-label', '2,001')
+    await expect(vendor.locator('[data-publisher-stat="stars"]')).toHaveText('2k')
+    await expect(vendor.getByRole('list', { name: 'Popular plugins by vendor' }).getByRole('link')).toHaveText(['package-01', 'package-02'])
+    await expect(vendor.locator('[data-publisher-avatar]')).toHaveJSProperty('naturalWidth', 100)
+    expect(islandUpdates).toBe(0)
+    await page.screenshot({ path: 'tmp/publishers-desktop.png', fullPage: true })
+})
+
+test('live search and sorting preserve URL state and browser history', async ({ page }) => {
+    await page.goto('/publishers')
+    await page.evaluate(() => { window.publisherMarker = 'retained' })
+    await sort(page).selectOption('stars')
+    await expect(page).toHaveURL('/publishers?sort=stars')
+    await expect.poll(() => names(page)).toEqual(['vendor', 'markstory', 'dereuromark'])
+    await version(page).selectOption('all')
+    await expect(page).toHaveURL('/publishers?sort=stars&cakephp=all')
+    await expect.poll(() => names(page)).toEqual(['vendor', 'cakedc', 'markstory', 'dereuromark'])
+    await search(page).fill('MARK')
+    await expect(rows(page)).toHaveCount(2)
+    await expect.poll(() => names(page)).toEqual(['markstory', 'dereuromark'])
+    await expect(page).toHaveURL(/search=MARK/)
+    await expect(page.locator('[data-publisher-rank]')).toHaveCount(0)
+    await page.getByRole('link', { name: 'Clear search', exact: true }).click()
+    await expect(page).toHaveURL('/publishers?sort=stars&cakephp=all')
+    await expect(rows(page)).toHaveCount(4)
+    await sort(page).selectOption('plugins')
+    await expect(page).toHaveURL('/publishers?sort=plugins&cakephp=all')
+    await expect.poll(() => names(page)).toEqual(['vendor', 'cakedc', 'dereuromark', 'markstory'])
+    await page.goBack()
+    await expect(page).toHaveURL('/publishers?sort=stars&cakephp=all')
+    await expect.poll(() => names(page)).toEqual(['vendor', 'cakedc', 'markstory', 'dereuromark'])
+    expect(await page.evaluate(() => window.publisherMarker)).toBe('retained')
+    await page.reload()
+    await expect(sort(page)).toHaveValue('stars')
+    await search(page).fill('no-match')
+    await expect(page.getByRole('heading', { name: 'No publishers found' })).toBeVisible()
+})
+
+test('directory navigation and publisher and plugin links use Interact', async ({ page }) => {
+    await page.goto('/')
+    await page.evaluate(() => { window.publisherMarker = 'retained' })
+    await page.locator('.desktop-nav').getByRole('link', { name: 'Publishers', exact: true }).click()
+    await expect(page).toHaveURL('/publishers')
+    await rows(page).first().getByRole('link', { name: 'vendor', exact: true }).click()
+    await expect(page).toHaveURL('/plugins/vendor')
+    await expect(page.getByRole('heading', { level: 1 })).toHaveText('vendor')
+    await page.getByRole('link', { name: '← Back', exact: true }).click()
+    await expect(page).toHaveURL('/publishers')
+    await rows(page).first().getByRole('link', { name: 'View vendor/package-01 details', exact: true }).click()
+    await expect(page).toHaveURL('/plugins/vendor/package-01')
+    await expect(page.getByRole('heading', { level: 1 })).toHaveText('vendor/package-01')
+    expect(await page.evaluate(() => window.publisherMarker)).toBe('retained')
+})
+
+test('publisher back link retains overview filters after searching within a profile', async ({ page }) => {
+    await page.goto('/publishers?search=vendor&sort=stars&cakephp=all')
+    await rows(page).first().getByRole('link', { name: 'vendor', exact: true }).click()
+    await expect(page).toHaveURL('/plugins/vendor')
+    await page.getByRole('searchbox', { name: 'Search plugins', exact: true }).fill('package-01')
+    await expect(page.locator('[data-package-row]')).toHaveCount(1)
+    await page.getByRole('link', { name: '← Back', exact: true }).click()
+    await expect(page).toHaveURL('/publishers?search=vendor&sort=stars&cakephp=all')
+    await expect(search(page)).toHaveValue('vendor')
+    await expect(sort(page)).toHaveValue('stars')
+    await expect(version(page)).toHaveValue('all')
+    await expect(rows(page)).toHaveCount(1)
+})
+
+test('version selection scopes totals, previews and latest release without hiding older publishers', async ({ page }) => {
+    await page.goto('/publishers')
+    await expect(version(page)).toHaveValue('current')
+    await expect(sort(page)).toHaveValue('monthly_downloads')
+    await expect(page.locator('[data-publisher-scope]')).toContainText('CakePHP 5')
+    await version(page).selectOption('4')
+    await expect(rows(page)).toHaveCount(1)
+    await expect(rows(page).first()).toHaveAttribute('data-publisher-namespace', 'cakedc')
+    await expect(rows(page).first().locator('[data-publisher-stat="monthly_downloads"]')).toHaveText('1.2k')
+    await expect(rows(page).first().locator('time')).toHaveAttribute('datetime', '2025-03-01')
+    await expect(page.locator('[data-publisher-scope]')).toContainText('CakePHP 4')
+    await sort(page).selectOption('downloads')
+    await expect(rows(page).first().locator('[data-publisher-stat="downloads"]')).toHaveText('9k')
+    await search(page).fill('cake')
+    await expect(page.locator('[data-publisher-rank]')).toHaveCount(0)
+    await page.getByRole('link', { name: 'Clear search', exact: true }).click()
+    await expect(search(page)).toHaveValue('')
+    await expect(page).not.toHaveURL(/search=/)
+    await expect(version(page)).toHaveValue('4')
+    await expect(sort(page)).toHaveValue('downloads')
+    await page.reload()
+    await expect(rows(page)).toHaveCount(1)
+    await version(page).selectOption('all')
+    await expect(rows(page)).toHaveCount(4)
+    await page.goBack()
+    await expect(rows(page)).toHaveCount(1)
+    await expect(version(page)).toHaveValue('4')
+})
+
+test('pagination maintains ranks and sorting or searching resets to page one', async ({ page }) => {
+    execFileSync('php', ['tests/browser/publishers-state.php', 'seed'])
+    try {
+        await page.goto('/publishers')
+        await expect(rows(page)).toHaveCount(20)
+        await page.getByRole('link', { name: 'Next', exact: true }).click()
+        await expect(page).toHaveURL('/publishers?page=2')
+        await expect(rows(page)).toHaveCount(4)
+        await expect(rows(page).first().locator('[data-publisher-rank]')).toHaveText('#21')
+        await page.goBack()
+        await expect(rows(page)).toHaveCount(20)
+        await page.goForward()
+        await expect(rows(page)).toHaveCount(4)
+        await page.reload()
+        await expect(rows(page)).toHaveCount(4)
+        await sort(page).selectOption('stars')
+        await expect(page).toHaveURL('/publishers?sort=stars')
+        await expect(rows(page)).toHaveCount(20)
+        await page.getByRole('link', { name: 'Next', exact: true }).click()
+        await expect(rows(page)).toHaveCount(4)
+        await version(page).selectOption('4')
+        await expect(rows(page)).toHaveCount(1)
+        await expect(rows(page).first()).toHaveAttribute('data-publisher-namespace', 'cakedc')
+        await expect(page).not.toHaveURL(/page=2/)
+        await version(page).selectOption('current')
+        await search(page).fill('vendor')
+        await expect(rows(page)).toHaveCount(1)
+        await expect(page).not.toHaveURL(/page=2/)
+        await expect(page.locator('[data-publisher-rank]')).toHaveCount(0)
+    } finally {
+        execFileSync('php', ['tests/browser/publishers-state.php', 'clear'])
+    }
+})
+
+test('native GET search, sorting and links work without JavaScript', async ({ browser }) => {
+    const context = await browser.newContext({ javaScriptEnabled: false })
+    const page = await context.newPage()
+    try {
+        await page.goto('/publishers')
+        await sort(page).selectOption('stars')
+        await search(page).fill('MARK')
+        await page.getByRole('button', { name: 'Apply', exact: true }).click()
+        await expect(rows(page)).toHaveCount(2)
+        await expect.poll(() => names(page)).toEqual(['markstory', 'dereuromark'])
+        await page.getByRole('link', { name: 'markstory', exact: true }).click()
+        await expect(page).toHaveURL('/plugins/markstory')
+        await page.getByRole('link', { name: '← Back', exact: true }).click()
+        await expect(rows(page)).toHaveCount(2)
+        await expect(search(page)).toHaveValue('MARK')
+        await expect(sort(page)).toHaveValue('stars')
+        await page.goto('/publishers?cakephp=all')
+        await page.getByRole('link', { name: 'View cakedc/users details', exact: true }).click()
+        await expect(page).toHaveURL('/plugins/cakedc/users')
+    } finally {
+        await context.close()
+    }
+})
+
+test('directory fits mobile screens in both themes and handles missing avatars', async ({ page, context }) => {
+    await page.route('https://github.com/*.png*', route => route.abort())
+    for (const width of [390, 320]) {
+        await page.setViewportSize({ width, height: 844 })
+        for (const theme of ['cakephp', 'cakephp-dark']) {
+            await context.addCookies([{ name: 'theme', value: theme, domain: '127.0.0.1', path: '/' }])
+            await page.goto('/publishers')
+            await expect(rows(page)).toHaveCount(3)
+            await expect(rows(page).first().locator('[data-publisher-avatar]')).toBeHidden()
+            await expect(rows(page).first().locator('.publisher-avatar')).toHaveText('VE')
+            expect(await page.evaluate(() => document.documentElement.scrollWidth <= innerWidth)).toBe(true)
+            expect(await rows(page).evaluateAll(elements => elements.every(element => element.scrollWidth <= element.clientWidth))).toBe(true)
+            await page.locator('.mobile-menu summary').click()
+            await expect(page.getByRole('navigation', { name: 'Mobile navigation' }).getByRole('link', { name: 'Publishers', exact: true })).toHaveAttribute('aria-current', 'page')
+            await page.locator('.mobile-menu summary').click()
+            await page.screenshot({ path: `tmp/publishers-mobile-${theme}-${width}.png`, fullPage: true })
+        }
+    }
+})
diff --git a/tests/browser/setup.php b/tests/browser/setup.php
index d77e2d21..46abe7f5 100644
--- a/tests/browser/setup.php
+++ b/tests/browser/setup.php
@@ -54,6 +54,12 @@
     }
 }
 Cache::clearAll();
+foreach (['vendor', 'markstory', 'dereuromark', 'cakedc'] as $owner) {
+    Cache::pool('github_profiles')->set('github_profile_v2_' . $owner, [
+        'avatarUrl' => 'https://avatars.githubusercontent.com/u/123',
+        'bio' => $owner === 'cakedc' ? null : 'CakePHP plugins by ' . $owner . '.',
+    ], 3600);
+}
 if (!is_dir(TMP . 'browser-sessions')) {
     mkdir(TMP . 'browser-sessions', 0700, true);
 }
diff --git a/webroot/img/packagist-logo.png b/webroot/img/packagist-logo.png
new file mode 100644
index 00000000..76c0e62a
Binary files /dev/null and b/webroot/img/packagist-logo.png differ