Does Codacy check for dependencies?

Yes, Codacy scans the manifest files of your repositories and displays any vulnerable dependencies as Codacy issues.

For a list of supported languages and manifest files scanned by the Codacy dependency vulnerability scanning tools, see Supported languages and tools.