Apache's "DeviceMap" is at the incubating stage. Presumably Apache will risk the same issues Github experienced if they don't clearly resolve the legal issue.
If they do address the legal issue it's very hard for a community of people to maintain accurate and consistent device data without screen scrapping from web sites like GSM Arena. No serious business would want to pin their mobile architecture to something that is so fragile and could be removed at any moment. That's why good DDRs cost a little bit of money as a professional team needs to be employed. DDR data is very different to maintaining source code.
I would like to see Apache create a reference implementation for device detection which could be extended to allow other DDRs to be plugged in. This way you could choose the DDR. I don't think this is a direction the DeviceMap team want to go down.
If you need an open source DDR my company 51degrees.mobi provide one with a paid for option to get more features such as weekly automatic updates.