I've added the Code Cracker plugin to my Sonar instance and added its rules to some quality profile. In Visual Studio I use SonarLint to synchronize the rulesets. While SonarLint adds the codecracker.CSharp analyzer to the project it doesn't add the developmentDependency attribute.
Not sure if this is an issue with the plugin or SonarLint, but it works fine for other analyzers (including custom ones which I've created using their SDK).