Use a flag around local flow versions

lib/pkg/flow-base/lib/FlowHelpers.js

@@ -150,14 +150,18 @@ async function canFindFlow(flowPath: string): Promise<boolean> {
  *   preferences in Atom, in which case the return value will be stale.
  */
 async function getPathToFlow(): Promise<string> {
-  const config = global.vscode.workspace.getConfiguration('flow').get('pathToFlow')
-  if (await canFindFlow(config)) {
-    return config
+  const config = global.vscode.workspace.getConfiguration('flow')
+  const userPath = config.get('pathToFlow')
+
+  if (await canFindFlow(userPath)) {
+    return userPath
   }
-  if (await canFindFlow(fallbackNodeModuleFlowLocation())){
+
+  const shouldUseNodeModule = config.get('useNPMPackagedFlow')
+  if (shouldUseNodeModule && await canFindFlow(fallbackNodeModuleFlowLocation())){
     return fallbackNodeModuleFlowLocation()
   }
-  return config
+  return userPath
 }
 
 /**

package.json

@@ -36,6 +36,11 @@
                     "type": "boolean",
                     "default": true,
                     "description": "Stop Flow on Exit"
+                },
+                "flow.useNPMPackagedFlow": {
+                    "type": "boolean",
+                    "default": false,
+                    "description": "Support using flow through your node_modules folder, WARNING: Checking this box is a security risk. When you open a project we will immediately run code contained within it."
                 }
             }
         }
@@ -77,4 +82,4 @@
     "bugs": {
         "url": "https://github.com/flowtype/flow-for-vscode/issues"
     }
-}
+}