What approaches are being used in the management of Open Source libraries like java script and python? We have managed the JS side for a while, but Python is adding additional layers of complexity in terms of: version management, dependency alignment, license compliance, vulnerability identification and mitigation and given the numbers of components - automation is critical. Some libraries have been rolled into internal framework.

If your project relies on open-source libraries—whether distributed via NPM for JavaScript, PyPi for Python, Cargo for Rust, or other package managers—we utilize internal repositories like Nexus to manage them (you may want to use GitHub registries or other artefact storage solutions). These repositories serve both as a place to publish private libraries and, when necessary, to host forks of critical open-source dependencies (making them internal). There should be no distinction among private, external and open-source libraries; all dependencies must be stored within controlled boundaries and managed by your development team.

Sounds like you need to borrow some DevOps practices to manage!  Maintaining a central repo and establish some guidance could help but it does with an overhead (resources).