Decentralized Review and Attestation of Software Attribute Claims