Do I just have to include mongoose as a dependency as well in the parent app or is there a way of getting access to that module by way of the child?
While it’s possible for you to e.g. require('github/node_modules/mongoose'), the standard practice is to install all of your dependencies explicitly (i.e., you should include mongoose as a dependency of your app) and require('mongoose').