The point here is UnifiedNLP and microG Services Core need to impersonate GMS to be able to replace its services. They share the package ID, which Yalp Store (and F-Droid, and every other store out there) use as an identifier, and as a side effect, confuse it. But if you try to install the “update”, the package installer reports you can’t, because of different package signatures. So no problem, just a little visual issue here, .
Also remember that Google don’t want us to avoid their services in their walled-garden OS, so microG and UnifiedNLP are working on a limited framework which inevitably causes this kind of issues.
You can read more about this specific problem here:
and about Android’s security model some posts above the quoted before:
.